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* ABSTRACT 

Mobile devices enable secure, convenient authorization of e-banking, retail payment, brokerage, and 
other types of transactions. 
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Mobile Personal Devices 

Mobile devices enable secure, convenient authorization of 
e-banking, retail payment, brokerage, and 
other types of transactions . 

he growth of mobile commerce 
follows die increasingly popular 
ownership and use of mobile per- 
sona!, programmable communica- 
tion devices, including mobile 
phones and PDAs. These 
devices are effective for autho- 
rizing and managing payment and banking transac- 
tions, offering security and convenience advantages 
compared to online payment via PCs. Some of these 
advantages are available in existing devices, others 
require modest, inexpensive enhancements likely to be 
available in new devices in the next few years. The use of 
secure and convenient mobile personal devices could revo- 
lutionize the payment, banking, and investment industries 
worldwide. Here, I discuss some of the challenges and oppor- 
tunities involved in their use for making secure payments and 
authorizing banking transactions. 

Illustration by Terry Miura 
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Figure 1. Modular 
secure transaction 
architecture using 
mobile personal 
devices. 



Security and convenience are the two main moti- 
vations for using these devices for transactions. The 
security is revolutionary. Existing means of electronic 
authorizations, including ATM transactions and 
card-not-present credit/debit card transactions, as 
well as online banki ng, are based 
on account-holder authentica- 
tion by the payment system. But 
it can fail in multiple ways, 
including through the compro- 
mise of the banks computers 
and, in online banking, of die 
users computer, as well Com- 
puters are generally vulnerable to 
compromise, especially the users 
computer, which typically has 
minim al security mechanisms 
and processes. However, existing 
systems do not always distinguish 
among fraud by the user, com- 
promise of the users computer, 
and compromise of the banks 
computer. Assigning responsibil- 
ity for damages resulting from fraud and disputes is 
therefore done through administrative and legal means 
rather than through technical means. In most coun- 
tries, credit card purchasing, AFM withdrawals, and 
electronically generated money transfers must be can- 
celled if the user claims not to have audiorized diem 
(and the bank cannot prove the user is cheating). 
Online brokerage and banking operations are nor- 
mally irreversible. Responsibility is not necessarily allo- 
cated fairly, and non-corrupted, genuinely innocent 
parties may find themselves responsible for damages 
due to another party's fraudulent activity or security 
breach. Moreover, when using online banking and 
brokerage services, users are vulnerable to attacks on 
their (insecure) computers, as are the banks comput- 
ers. Note that using a smart card connected to the PC] 
does not ensure security, as a corrupted PC (possibly 
infected by a virus) may send incorrect information to 
the smart card; a secure transaction device needs its 
own I/O interface to the user [8j. The lack of a tech- 
nical solution for preventing and resolving fraud cre- 
ates substantial risk and. expense for users, merchants, 
and operators (banks) alike. 

Mobile personal devices, usually with a built-in dis- 
play and keyboard, are well-positioned to provide a 
technical solution for reducing fraud and allowing the 
Fair allocation of responsibility for damages from 
fraud. Some amount of security is already part of the 
authentication mechanism of existing cell phones as a 
way to prevent call theft. Moreover, it is relatively easy 
and inexpensive for device manufacturers to incorpo- 



rate additional mechanisms to ensure secure transac- 
tion authorization. These mechanisms help prevent 
most fraud and allocate responsibility fairly for any 
remaining fraud. For users, their value far outweighs 
thei r relatively modest cost. 




3. Secure transaction 



Convenience is another reason people use mobile 
personal devices for transactions. Convenience can 
result from using their communication capabilities 
when paying for goods and services, whether on foot or 
in cars, planes, or trains, and authorizing transactions at 
remote servers of banks, brokerages, and merchants. 

A devices user interface can also improve conve- 
nience; for example, the user can view balances and 
logs of transactions and retrieve receipts of payments, 
it also makes it easy for a single mobile device to sup- 
port several applications, including banking, invest- 
ment, and retail payments, using multiple charge, 
micropayment (cash), and loyalty accounts, all sup- 
ported by a uniform user interface and consolidated 
management. To support the many possible scenarios 
and applications, these devices should incorporate 
modular authorization architectures. 

Transactions Architecture 

Figure 1 oudines a modular architecture for secure 
transactions using these devices. Components include 
at least the user, the device, and a mobile transaction 
provider, which may be a cellular operator, a bank, or 
a combination of operator and bank. In a payment 
transaction, a merchant (a provider of services and/or 
goods) is also included; however, because the mer- 
chant may work with a different transaction provider, 
rhe two providers have to be able to in temperate. The 
arrows represent long- term relationships; the broken 
arrow represents a transaccion-specific relationship. 

Secure transactions consist of three independent 
processes: 

Identification. The device identifies the user through 
physical possession (as with regular cell phones), 
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XISTING SYSTEMS DO NOT ALWAYS DISTINGUISH 
AMONG FRAUD BY THE USER, COMPROMISE OF 
THE USER'S COMPUTER, AND COMPROMISE OF 
THE BANK'S COMPUTER. 



passwords, or biometrics (such as voice recognition); 

Authentication. The mobile provider authenticates the 
transaction request from the device via either sub- 
scriber identification (as with existing phones) or 
cryptographic mechanisms (such as digital signa- 
tures or secure protocols, Like the Wireless Trans- 
port Layer Security Specification) [10]; and 

Secure performance. The transaction is performed by 
the mobile transaction provider, possibly with the 
help of the merchant and/or other transaction 
providers) and may 
involve secure payment 
protocols (such as Inter- 
net Keyed 

Payments/Secure Elec- 
tronic Transactions, or 
iKP/SET) [1,5]; the 
mobile transaction 
provider is independent 
of the communication 
protocol in the mobile 
device. For additional 
modularity, it may use 
mobile gateway(s) to 
support multiple com- 
munication and autho- 
rization mechanisms. 




This modular design pro- 
vides inexpensive and 
flexible support for secure 
transactions. 



Figure 2. Secure 
transaction request by 
personal mobile device. 



Transaction Request Mechanisms 

Mobile personal devices should incorporate mecha- 
nisms to securely authenticate transaction requests that 
can be used by (preferably) multiple transactions and 
scenarios. To allocate responsibility, transaction 
requests should be digitally signed by the device using 
a private key (not known to the providers) kept in the 
device. The user does not have to obtain a public-key 
certificate from a trusted certificate authority; it suf- 
fices that the agreement between the user and the 



provider states the public key and the algorithm. To 
reduce hardware costs, designers may prefer public-key 
signature algorithms (such as die Digital Signature 
Algorithm, or DSA. [7]), so most of the computations 
are done offline, and online signing is efficient. 

The device displays die transaction details to the 
user and asks his or her consent for each transaction 
request. The device should ensure the user is aware of 
the entire request, possibly by limiting the request for- 
mat; for example, payment transactions may display 

the amount and other 
details (such as merchant 
and product identifica- 
tion). 

For flexibility, the 
device might allow the 
signing of markup docu- 
ments using markup lan- 
guage (such as a subset of 
HTML [3]) with fixed, 
well-defined rendering. As 
a further precaution 
against misleading docu- 
ments, the device should 
present to the user and 
sign upon approval only 
markup approved or pro- 
vided by an authority or 
provider trusted by the user, that is, accompanied by 
an appropriate signature (and, optionally, by the sign- 
ers certificate chain); this allows secure inclusion of 
identifications and certifications in textual or graphical 
(trademark) form. 

Validating signatures can be computationally inten- 
sive (with DSA even more than with the RSA signa- 
ture-only algorithm). However, most applications 
need few document Templates; a single signed template 
can be used for many transactions with unsigned val- 
ues for parameters (such as date, amount, and payee) 
that differ from, transaction to transaction; by caching 
the (validated) templates, the device can save on both 
communication and computation overhead. Separat- 
ing the parameters from the template also simplifies 
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the automated processing of signed transaction 
requests once they reach the transaction provider. The 
device signs both the markup and rhe parameters; to 
prove the identity of rhe template approver, this signa- 
ture may also be included in the data signed by rhe 
device (see Figure 2). (Extensions, including those for 
validating the fairness of lotteries and gambling ser- 
vices, are beyond the scope of diis article.) 

The security of this design depends on the secure 
operation of the mobile 



ing and mobile commerce solutions. 

More complex payment transactions typically 
involve at least one additional party: rhe merchant. In 
rhe simplest case, the merchant receives payment from 
some arbitrary, external paymenr/tra-nsaction provider 
(such as a bank or credit card company); the mobile 
transaction provider audiorizes the transaction. 

An important payment application is using charge 
cards to pay remote merchants for, say, goods bought 

online or on the tele- 
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Figure 3. Example of 
location-based payments 
using a mobile device. 



personal device, including 
its user identification. 
Some current mobile 
devices, including phones, 
use only simple, prepro- 
grammed processors, and 
therefore can be trusted to 
operate securely However, 
some devices support 
downloaded, general-pur- 
pose applications and may, 
like computers, be vulner- 
able, as with viruses. 

Secure transaction 
authorization may, there- 
fore, involve a secure co- 
processor, used only to authorize transactions (and 
possibly to view confidential data). There should be 
visible indication when die display and keyboard are 
controlled (only) by the secure co-processor, allowing 
the user to securely identify (such as by password) and 
authorize transactions. The co-processor is invoked by 
the main processor to authorize transactions, provid- 
ing the raw request in shared memory; if authorized, 
the co-processor returns the signed transaction request 
in the shared memory. 

Applications and Scenarios 

The modular secure transaction architecture using 
mobile personal devices in Figure 1 can be used for 
multiple applications and scenarios. The simplest 
involves only the user, the device, and a single transac- 
tions provider (such as a bank, brokerage, or insurance 
company). The user identifies to the mobile device, 
possibly through secure identification mechanisms 
(such as a PIN, voice identification, or fingerprint); 
the device then authorizes a transaction, ro the provider 
(such as money transfers and investments). Authoriza- 
tion is preferably through some secure public-key sig- 
nature process, allowing precise allocation of 
responsibility for fraud, (disputed transactions). How- 
ever, less secure forms of authorization (such as relying 
on subscriber identification and/or encrypted pass- 
words) may suffice for some applications, as in e-bank- 
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phone. Since the mer- 
chant and the consumer 
are in separate locations, 
the merchant cannot 
compare the customers 
signature to die signature 
on the charge card. A per- 
sonal mobile device (such 
as a cell phone) is an alter- 
native means of validating 
the customers consent to 
the transaction via 
authenticated communi- 
cation with the mobile transaction provider. The 
communication may be initiated by the consumer 
using the mobile device or by the merchant commu- 
nicating with mobile transaction providers; for exam- 
ple, in the PayBox system, a merchant (such as a Web 
site) contacts PayBox, which operates as a mobile 
transaction provider, and PayBox then contacts the 
cell phone of the consumer, relying on subscriber 
identification to trust the reply (approving or reject- 
ing payment). Payment is not guaranteed, since the 
consumer may dispute the identification. By using 
secure signature from the consumers device, instead 
of subscriber identification, the payment provider or 
external arbiter can allocate responsibility for fraud, as 
well as resolve disputes and guarantee payment. 

In some scenarios, mobile devices play an addi- 
tional role beyond authorizing the transaction. 
Devices used for browsing the Web represent a natural 
means for paying for goods and services bought 
through merchants' Web sites. Similarly mobile 
devices can initiate location-dependent payments. Fig- 
ure 3 outlines how a mobile device can be used to pay 
a parki ng merer. Imagine the user instructs the device 
ro contact the parking merchant (flow 1). The device 
then sends its location via the provider to the mer- 
chant, initiating the parking transaction (flow 2). The 
merchant returns the offer; the provider often converrs 
(transcodes) from, say, HTML to binary Wireless 
Markup Language (WML) the offer to fit the particu- 
lar mobile device. The offer may contain details rele- 
vant to the purchase (such as the "per-fee link syntax" 
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in HTML, [6]). The provider also creates markup to 
display the offer co rhe user and secure the users autho- 
rization of the transaction request: for the sake of effi- 
ciency, this seep may be combined wi th rhe conversion 
(transcoding) process. 

Using a mobile device with a mechanism for secure 
transaction requests, the provider sends die offer (flow 
3) in signed markup. The device (usually using its 
secure co-processor) displays the offer to the user, 
receives approval, and returns (flow 6) a signed trans- 
action request, as in Figure 2. 

Employing mobile devices (such as phones) widiout 
mechanisms for secure transaction requests, the autho- 
rization function has to rely on the security of the com- 
munication between the device and the provider. Hie 
provider incorporates the offer details (such as 
amount) into the display markup sent to the device 
and shown to the user; if the users response, sent to die 
provider, is positive (say the user clicks on the link 
identifying the product and price), the provider views 
it as transaction audiorization. This process requires 
the provider to link between the offer sent to the 
mobile device (flow 3) and die payment transaction 
request received from the mobile device (flow 6). To 
avoid maintaining state in the provider, die payment 
request may contain the state information, possibly in 
a cookie or as parameters of the URL. 'Ib prevent 
forgery or replay, the state includes a Message Authen- 
tication Code (MAC) using a key known only to the 
provider and computed over the state and time. 

Upon receiving an authenticated payment transac- 
tion request (flow 6), the provider confirms payment 
to the merchant (flow 7) by sending a signed or 
authenticated message. The merchant sends a receipt 
confirming payment was received; if the meter is con- 
nected to the merchants server, it may be sent directly 
to the meter (flow 8'). More often, the meter has min- 
imal communication capabilities (such as infra-red), 
and the receipt is sent via the provider and device 
(flows 8, 9: 11); the user may even have to manually 
type the receipt into the meter using a keypad. The 
receipt may have multiple formats as well; the parking 
meter itself may use a concise receipt format for effi- 
cient communication and processing; Moreover, to 
allow a low-cost parking meter wich limited computa- 
tional resources co validate the receipt, the receipt sent 
to the meter (flow 1 1 or 8') uses an efficient MAC 
with a shared key between the meter and the mer- 
chants server. 

Electronic Receipts and Tickets 

.Additional applications involving this modular trans- 
action architecture, as in Figure 1, can also provide and 
use secure electronic receipts, or e-receipts, or a proof 



of payment the consumer presents to a third party or 
device. Applications include: 

• Presenting the e-receipt to a validating/dispensing 
device to prove payment and receive service or mer- 
chandise; the validation device (such as the parking 
meter in Figure 3) need not communicate directly 
with die payment transaction provider or merchants 
server, so long as it is able to validate the e-receipt; 

• Presenting die e-receipt to a third party (such as die 
Internal Revenue Service for tax purposes or an 
employer for expense reimbursement); 

• Providing "proof of purchase" for warranty service, 
returns, exchanges, and rebates; and 

• Using the e-receipt as an e- ticket, the mobile device 
holds die receipt (die ticket), presenting it upon 
inspection at, say, an airport for claiming tickets. 

In each of these applications, except the first, die 
e-receipt should be a digital signature from the pay- 
ment transaction provider or the merchant, thus allow- 
ing validation at arbitrary times by any party. 

Payments via Mobile Transaction Provider 

The mobile transaction provider may also be involved 
in the actual payment to the merchant. (Charging by 
mobile operators for communication and value-added 
services is a special case,) in todays mobile phones, 
authorization is via subscriber identification mecha- 
nisms, which do not provide non-repudiation. How- 
ever, in the future, mobile consumers might also use a 
secure mobile signing device, as in Figure 2, to avoid 
disputes. This device may allow high-value transac- 
tions, as well as paying mobile operators who are not 
completely trusted (such as when roaming). Mobile 
communication mechanisms (such as the Global Sys- 
tem for Mobile communication, or GSM) allow the 
foreign (visited) network to authenticate the user with 
information from the home network. Charging 
requires prior agreements between the visited and the 
home networks. Designers of the Universal Mobile 
Telecommunications System (UMTS) recognized the 
difficulty of establishing agreements in advance among 
visited networks and all home networks [4|; thus. 
UMTS includes mechanisms for dynamic negotiation 
and setup of roaming agreements between a visited 
network and a home network [4], Roaming agree- 
ments seek to establish fees and ensure operator trust- 
worthiness. Operators are crusted to deliver payments 
in time; foreign (remote) operators are also trusted to 
not overcharge visiting customers. 

A secure signing mobile device can prevent fraud 
(overcharging) by foreign network providers, thereby 
allowing more auromated and variable roaming agree- 
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merits. Operators can also use the Final Payments pro- 
tocol discussed in [2] to extend pairwise trust relation- 
ships inro global trust relationships, allowing 
automated, secure, low-cost universal roaming, 

Orher payment scenarios involve mobile transac- 
tion providers participating in the payment transac- 
tion itself, not just in its authorization. One 
motivation is to establish new payment networks, pos- 
sibly involving mobile operators and financial institu- 
tions as providers of mobile payment services. 
Motivations for establishing new payment networks 
include die exploitation of business opportunities 
inherent in the billing, customer-service, and technical 
relationships among mobile users (and devices) and 
mobile operators. Another is support for low-value 
payments (micropayments) and final (irreversible) 
payments, each possibly yielding additional mobile 
communication services. Micropayments and final 
payments using mobile devices may enable the pur- 
chase of content and services delivered via the net- 
work, as well as person-to-person payments and 
money transfers; the latter represents a substantial 
opportunity, especially in light of the millions of over- 
seas employees worldwide. Moreover, due to their abil- 
ity to allocate responsibility for fraud, these new 
payment networks may lower the cost of transactions 
(as a percentage of the transaction) for large-value 
payments and money transfers. 

A major challenge for any new payment system is 
how to achieve a critical mass of merchants, buyers, 
and transactions needed to justify investment by each 
of them and ensure a proper level of acceptability; for 
example, a customer of any mobile provider should be 
able to buy from any merchant that maintains 
accounts with most payment transaction providers. 
One solution for payment transaction providers is to 
use the Final Payments protocol, allowing interoper- 
ability among any provider connected by the transitive 
closure of all pairwise, provider-to-provider trust and 
interoperability agreements. For instance, interoper- 
ability among mobile payment providers is a feature 
cited by Fundamo, Inc. (www.fiindamo.com) in its 
payment systems product. 

In other cases, the mobile transaction provider is 
part of an existing payment network, as in a credit card 
network. The involvement of the mobile provider in a 
credit card transaction could be as simple as transmis- 
sion via the Secure Sockets Lnyer/Transporr Layer 
Security (SSL/TLS) protocol of credit card details or as 
complex, as a purchase via the iKP/SET protocols [1, 
5]. I n either case, the mobile provider acts on behalf of 
the user as a wallet server, as it is located along the 
route between mobile device and merchant. The 
mobile transaction provider may implement a variety 



of payment protocols, ranging from the complex (such 
as iKP/SET) to the simple (such as SSL/Tl,S trans- 
mission of credit card numbers). The mobile provider 
may securely inform the credit-card-issuing bank of 
any pending transaction, allowing the issuer to reject 
fraudulent transactions; a one-time or limited (to pay- 
ments via mobile provider) card number may be used 
for added security. 

Conclusion 

Mobile personal devices are beginning to be used to per- 
form secure banking, payment, and other transactions. 
Cell phones, PDAs, and other mobile personal devices 
are a convenient means for audiorizing transactions. In 
the future, they are likely to incorporate low-cost 
enhancements providing secure, signed transaction 
requests, providing third-party verifiable proof of the 
consumers agreement to each transaction. This support- 
will be flexible enough to support multiple applications, 
scenarios, and providers. New payment networks are 
likely to take advantage of the new capabilities, offering 
such services as micropayments and final payments pre- 
viously impossible or impractical. Mobile personal 
devices will play an increasingly important role in pay- 
ments, banking, investing, and other transaction-based 
and security-sensitive applications. 0 
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(57) ABSTRACT 

Embodiments of the present invention relate to systems, 
methods and apparatus for the generation, transmission, 
storage and manipulation of electronic receipts which com- 
municate itemized purchase transaction information. Pre- 
ferred embodiments comprise wireless vendor devices and 
wireless purchaser devices which transmit electronic 
receipts at a point-of-sale for documentation of a purchase 
transaction. Further processing of the electronic receipt 
information may be performed with a purchaser device or 
with a secondary computing device after subsequent receipt 
transmission to that secondary device, 

16 Claims, 3 Drawing Sheets 
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METHODS AND SYSTEMS FOR 
ELECTRONIC RECEIPT TRANSMISSION 
AND MANAGEMENT 

THE FIELD OF THE INVENTION 

Embodiments of the present invention relate to methods, 
systems and apparatus for communication and management 
of electronic receipt information. More particularly, these 
embodiments provide for the transmission of an electronic 
receipt from a vendor device to a purchaser device and for 
subsequent transmission, in some embodiments, of the elec- 
tronic receipt to management and accounting software. An 
electronic receipt may be transmitted in conjunction with 
cash payment, charge, debit and authorization information 
or may be transmitted as a unique entity. Some embodiments 
of the present invention may utilize wireless purchasing 
devices (WPDs) to communicate with point-of-sale wireless 
vendor devices (WVDs) and arrange the electronic transfer 
of receipt information. 

BACKGROUND 

Electronic transactions involving the transfer of money 
and pecuniary assets are common in our society today. 
Stocks and bonds may be purchased and. traded using only 
electronic transactions. Goods and services are also com- 
monly purchased over the telephone or via the Internet using 
credit or debit accounts with electronic authorization. 

Retail vendors typically accept credit and debit cards 
which are verified and authorized using electronic commu- 
nications methods. Nearly every significant retail vendor 
accepts some form of credit or debit card as remuneration for 
goods or services. The accounts accessed through these 
cards are typically identified by a number embossed on the 
card and a magnetic strip on the card's surface that is 
encoded with account information. Transactions involving a 
credit or debit card account require authorization from the 
organization who issues the card. This authorization is 
generally obtained at the point-of-sale by a vendor through 
electronic communications channels. A transaction amount 
is determined and the amount of the transaction along with 
the account identification information are transmitted to the 
organization which issued the card or an authorization 
provider(AP). If the account has sufficient credit or finds to 
cover the transaction amount and the account has not been 
deactivated for some other reason, the card issuer will send 
an authorization code to the vendor or AP which indicates 
that the issuer will transfer the authorized amount to the 
vendor at an appropriate time. 

Account information may be obtained by swiping the 
electronic strip of the card across a magnetic reader thereby 
eliminating the need for manual input. The transaction 
amount may also be transferred from an electronic cash 
register and combined with the account information auto- 
matically to make an authorization request. 

These point-of-sale authorization request devices are typi- 
cally connected to the card issuers or their representatives, 
sometimes known as authorization processors (APs), 
through a conventional telephone fine. Often a dedicated 
phone line is connected to the point-of-sale authorization 
device for quick access to authorization data. 

Wireless communication technology has progressed rap- 
idly in recent years. Cell phones and other long-range 
communication devices have proliferated and are now com- 
monplace among consumers. As technology advances, the 
cost of these devices is plummeting and even more wide- 
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spread use is eminent. Mobile phones, pagers, two-way 
radios, smartphones, personal digital assistants (PDAs) and 
other communicators are all available on the market. 
Internet use is also skyrocketing with millions of new 

5 users logging on each year, Internet commerce now repre- 
sents a significant portion of retail commerce and is used by 
millions of consumers each day. 

Communications protocols exist which allow present gen- 
eration electronic communications devices to interface with 

10 the Internet and access Internet resources. The Wireless 
Application Protocol (WAP) is an open, global specification 
that enables mobile wireless communications devices to 
access and interact with Internet information and services. 
WAP is a communications protocol and environment which 

15 can be built on nearly any operating system including 
PalmOS, EPOC, Windows CE, FLEXOS, OS/9, JavaOS and 
others and provides service interoperability between differ- 
ent device families. WAP works with most existing wireless 
communications networks such as CDPD, CDMA, GSM, 

20 PDC, PHS, TDMA, FLEX, ReFLEX, iDEN, TETRA, 
DECT, DataTAC, Mobitex and others. WAP developers 
operate Internet gateways specifically tailored for wireless 
communications device users. These devices typically have 
small displays, limited memory and less bandwidth that 

25 stationary, wire connected computers, therefore, WAP pro- 
vides for use of extended Markup Languages (XMLs) such 
as the Wireless Markup Language (WML) which offers 
Internet content tailored for cell phones, PDAs and other 
wireless, portable communications devices. 

Using WAP and similar technologies, vendors, news 
agencies, financial institutions and other providers allow cell 
phone and other portable communications device users to 
buy and sell securities, execute credit card transactions, 

35 make account transfers, make bill payments, receive and 
send e-mail, view news reports. These providers offer seam- 
less integration between the Internet and wireless portable 
communication devices. 

Wireless communication devices are also becoming com- 

40 monplace in the electronics industry. Wireless networking of 
portable computers and associated devices is now replacing 
a large segment of the networking market. Wireless com- 
munication devices including wireless networking adapters, 
hubs and other equipment utilize radio transmitters and 

45 receivers to transmit data signals from one device or node to 
another. These radio transmitters and receivers must utilize 
a specific frequency band and protocol to accomplish this 
task. Since these wireless networks and communications 
areas may often overlap, standards, protocols and privacy 

50 protection are necessary. One current standard in the indus- 
try has been established by the Institute of Electrical and 
Electronics Engineers, Inc. (IEEE) and is known as IEEE 
802.11. This standard comprises communications standards, 
protocol and equipment specifications for wireless commu- 

55 nication equipment including privacy and encryption pro- 
visions. 

Another innovation in the wireless communications arena 
is the advent of short-range wireless networking between 
portable communications devices. One standard for this 

60 technology is known as Bluetooth®, and is being established 
by a collaborative group of communications and computing 
companies. Devices incorporating Bluetooth® technology 
will utilize a micro-chip transceiver for communications 
between devices. Bluetooth® devices will transmit in the 

65 previously unused 2.4 GHz range and will have a range of 
about 10 meters which may be extended to about 100 meters 
by increasing transmitter power. Bluetooth® technology 
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promises to be a viable and economical networking solution Once the electronic receipt information has been trans- 
fer interconnection of cell phones, computers, printers, mitted to the purchaser device, the information derived from 
modems, computer peripherals, fax machines and other the electronic receipt may be processed and manipulated to 
communications and computing devices. The size of the provide additional functionality. Preferred embodiments of 
Bluetooth® transceiver makes it usable in devices as small 5 the present invention employ processing methods which 
as palm computers and cell phones. compile multiple electronic receipts and provide a user with 
Another established wireless connectivity standard is an accounting of each item purchased along with purchase 
known as IrDA and employs infrared radiation to commu- information. Items listed in electronic receipts may be 
nicate between devices. IrDA is a point-to-point narrow categorized into categories of items for accounting purposes, 
angle, ad -hoc data transmission standard designed to operate 10 Each item on an electronic receipt may be placed in one or 
over a distance of 0 to 1 meter at speeds of 9600 bps to 16 more categories and each item may be related to specific 
Mbps. It is typically used in a point-and-shoot fashion by budget accounts. The methods of embodiments of the 
pointing one device at another for direct data transmission. present invention may provide for real-time budgeting and 
SUMMARY AND OBJECTS OF THE accounting processes which allow a user to be constantly 
INVENTION 15 aware °f current account and budget situations. 

„ - , .j. , f ., . . • * Accordingly it is an object of some embodiments of the 

Preferred embodiments of the present invention provide « • . ■ * i . *u a a 

. . j . u- u -a f *u present invention to provide systems, method and apparatus 

systems, methods and apparatus which provide for the £ . t K . / rr 

J • • j * c 1 4 for creating electronic receipts, 

generation, transmission and management or electronic ... c ... 

receipts. Electronic receipts of embodiments of the present on u * another ob J ect of 501116 embodiments of the present 

invention may comprise purchase transaction information 20 invention to provide systems methods and apparatus for 

including, but not limited to, total purchase price, vendor ID, transmitting electronic receipts. 

purchaser ID, item descriptions, itemized pricing, purchase It is yet another object of some embodiments of the 

date, purchase time, discount information, creditor present invention to provide systems methods and apparatus 

information, authorization information, receipt management 25 for providing accounting and budgeting methods using 

\ information and other transaction information. The elec- electronic receipts. 

itronic receipts of embodiments of the present invention BRIEF DESCRIPTION OF THE DRAWINGS 
/comprise itemized information so that detailed tracking and 

f accounting of purchased items may be performed automati- to order that the manner in which the above-recited and 

v^ a j[y other advantages and objects of the invention are obtained, 

Typically, an electronic receipt will be generated by a 3 ° a more Particular description of the invention briefly 

vendor device at a point-of-sale. When a transaction takes described above will be rendered by reference to specific 

place, an electronic receipt may be transmitted from the embodiments thereof which are illustrated in the appeoded 

vendor device to a purchaser device where the receipt may drawings. Understanding that these drawings depict only 

be stored for further processing within the device or for 35 l yP ical embodiments of the invention and are not therefore 

further transmission to other devices and systems. Preferred t0 be considered to be limiting of its scope, the invention will 

embodiments of the present invention employ a wireless be described and explained with additional specificity and 

vendor device (WVD) which may be a single device or a detail through the use of the accompanying drawings in 

combination of devices capable of generating receipt infor- which: 

mation and transmitting receipt information to other devices. 40 FIG. 1 is a diagram showing components of a preferred 

A WVD typically employs wireless communications tech- embodiment of the present invention; 

no logy to transmit the receipt information. Embodiments of FIG. 2 is a diagram illustrating the typical use of an 

the present invention may employ a radio frequency embodiment of the present invention with a single WVD and 

transmitter, an Infrared transmitter or other wireless com- WPD; and 

munications methods. 45 FIG. 3 is a diagram illustrating an embodiment of the 

The electronic receipt will generally be transmitted to a present invention that includes multiple WVDs and multiple 

purchaser device and, in preferred embodiments, to a wire- vendor accounts. 

less purchasing device (WPD) which can store and manipu- DETAILED DESCRIPTION OF THE 

Ute the electronic receipt. A purchaser dev.ee, such as a PREFERRED EMBODIMENTS 

WPD, may process and display the electronic receipt infor- 50 

mation directly as well as retransmit the receipt information The figures listed above are expressly incorporated as part 

to other devices or systems for further processing. A WPD of this detailed description. 

may take the form of a personal digital assistant (PDA), a It will be readily understood that the components of the 

wireless phone or some other wireless communication present invention, as generally described and illustrated in 

device. 55 the figures herein, could be arranged and designed in a wide 

Alternate scenarios include purchasing an item using a variety of different configurations. Thus, the following more 

wireless point of sale system. With this transaction, receipt detailed description of the embodiments of the system and 

is transferred from the vendor to the wireless point of sale apparatus of the present invention, as represented in the 

device over a wireless system such as Bluetooth 13 or IrDA corresponding drawings, is not intended to limit the scope of 

connection. Under this scenario no direct Internet connec- 60 me invention, as claimed, but it is merely representative of 

tion is required as the information is transferred directly over the presently preferred embodiments of the invention, 

a wireless connection over the WPD and the vendor. The currently preferred embodiments of the present 

Another purchasing scenario involves the purchasing of invention will be best understood by reference to the 

an item over a direct Internet connection via an Internet drawings, wherein like parts are designated by like numerals 

Protocol. For example, WAP. In this purchasing scenario, 65 throughout. 

receipt is transferred from the vendor to the WPD via a wired In reference to FIG. 1, a preferred embodiment of a 

or a wireless Internet connection. consumer's wireless purchasing device (WPD) 2 is shown 
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comprising a microprocessor 4 for processing consumer 
input, communications functions and display functions as 
well as other functions. WPD 2 may also comprise a display 
6 in preferred embodiments, however display 6 is not 
required for rudimentary embodiments. An input device 8 5 
may also be part of WPD 2 to allow for consumer input and 
selection. WPD 2 may communicate with other electronic 
devices using a short-range communications device 14. 
Short range communications device 14 may be used to 
communicate with a vendor's point-of-sale device, such as 10 
wireless vending device (WVD) 20, with other WPDs, with 
external communication devices or with other electronic 
devices. However, the key function of short range commu- 
nications device 14 is to communicate with WvDs and to 
receive electronic receipt information therefrom. Short 1S 
range communications device 14 may be a Bluetooth® 
transceiver or similar short range networking device or may 
be an Infrared transceiver such as an IrDA standard port as 
well as other devices. WPD 2 also comprises memory 16 for 
storing electronic receipt and other information. WPD 2 may ^ 
also comprise input/output (I/O) 12 such as a serial port, 
parallel port, USB port or some other wired communication 
connection. I/O 12 may also be used to communicate with 
a vendor device at a point-of-sale transaction when wireless 
communication is not available or desired. ^ 

Some embodiments of WPD 2 may also comprise a 
bio me trie input device 10 to verify user identity. Biometric 
input device 10 may use thumb print analysis, retinal scan 
analysis or another identification method to identify the 
WPD user. Once the user is identified, user identity can be 3 q 
matched to account data to ensure that unauthorized users do 
not gain access to sensitive information or other user's 
accounts. 

Embodiments of the present invention also comprise a 
wireless vendor device (WVD) 20 which is typically posi- 35 
tioned at a point-of-sale for communication with WPDs. 
WVD 20 will generally comprise a short range communi- 
cations device 24 configured to communicate with short 
range communications device 14 used in WPDs. As with 
communications device 14, device 24 may be a Bluetooth® 40 
transceiver, an IrDA port or another communications device. 
In situations where multiple vendors are accessible to a 
single WPD at the same time, a Bluetooth® transceiver or 
similar networking device is preferred to allow multiple 
party communications. Short range communications device 45 
24 is connected to a vendor device 22 which is typically an 
electronic computing device such as an electronic cash 
register, an electronic vending machine, a bar-code reader or 
other device which may transmit and receive product and 
transaction information and transmit electronic receipt infor- 50 
mation. WVD 20 may communicate electronic receipt infor- 
mation or other information via short range transceiver 24 or 
via direct cable connection to WPD input/output 12 for 
direct wireline communications. 

WPD 2 may also communicate with secondary computing 55 
device 30 which may comprise a variety of devices 
including, but not limited to, a desktop computer, a main- 
frame computer, a storage device, a network server, an 
Internet site and many other computing devices. Secondary 
computing device 30 may be used for storage and processing 60 
of electronic receipt information. When WPD 2 has limited 
processing ability, limited display capability, limited 
memory or other limited features, secondary computing 
device 30 may receive information from WPD 2 for 
processing, display, storage, conversion or other manipula- 65 
tion or use. Even when WPD 2 does not have limited 
features, information may be transmitted to secondary com- 
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puting device 30 for archival storage, redundant file main- 
tenance or any other reason. 

WPD 2 may communicate with secondary computing 
device 30 via a short range communication devices 34 & 14 
or by direct wireline link through input/output devices 12 & 
36. Input/output devices 12 & 36 may comprise modems, 
network adapters, serial ports, parallel ports, USB ports and 
any other communications adapters or connections. 

During use of the systems and methods of embodiments 
of the present invention an exchange of information 44 takes 
place between a vendor device such as a WVD 20 and a 
purchaser device such as a WPD 2 as shown in FIG. 2. This 
information exchange 44 may comprise multiple transac- 
tions and multiple bi-lateral or unilateral data transmissions. 
In some embodiments, information exchange 44 may com- 
prise credit or debit account identification and authorization 
as well as identification of vendor and purchaser along with 
account information. Some or all of information exchange 
44 may be encrypted, coded or otherwise manipulated to 
preserve privacy. 

Information exchange 44 also comprises the transmission 
of electronic receipt information from vendor device 20 to 
purchaser device 2. Electronic receipt information typically 
comprises purchase transaction information including, but 
not limited to, total purchase price, vendor ID, purchaser ID, 
item descriptions, itemized pricing, purchase date, purchase 
time, discount information, creditor information, authoriza- 
tion information, receipt management information and other 
transaction information. The electronic receipts of embodi- 
ments of the present invention comprise itemized informa- 
tion so that detailed tracking and accounting of purchased 
items may be performed automatically. Detailed tracking as 
well as itemized information, automated logging or indexing 
of stored receipts is also made available. 

Information stored in purchaser device 2 may be 
compiled, displayed, converted or otherwise manipulated 
within purchaser device 2 through the use of microprocessor 
4, memory 16 and other components. Generally, a user may 
combine receipt information to obtain a running total of 
itemized and categorized purchase and budget information. 
When purchaser device 2 has limited processing capabilities 
or for other reasons, a user may transfer 46 receipt infor- 
mation from purchaser device 2 to secondary computing 
device 30 for further processing, storage, archiving and 
other functions. 

In a preferred embodiment, secondary computing device 
30 is a web server 42 which can be accessed through a 
wireless Internet connection. Web server 42 may provide 
compiled receipt information including itemized and cat- 
egorized purchase and budget information. Web server 42 
may further provide banking, automated bill payment, tax 
preparation and other financial services in connection with 
receipt information management. 

Secondary computing device 30 such as a home computer 
or web server may also .transmit compiled information 48 
back to purchaser device 2 for display and reference while 
a user is unable to connect to secondary computing device 
30. 

The electronic receipt information of preferred embodi- 
ments of the present invention comprises detailed informa- 
tion in an itemized format so that purchase data can be 
tracked, stored, and compiled for specific purchase items. 
Items may also be assigned to certain categories for which 
aggregate information may be compiled. Items may also be 
assigned to budget accounts from which funds are drawn 
when those items are purchased. A user may be alerted to 
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budget account overdrafts when receipt information is 
received or, in some embodiments, a preliminary receipt 
may be transmitted from vendor device 20 to purchaser 
device 2 for budget authorization prior to a final purchase 
transaction. Upon budget approval a specific purchase may 5 
be authorized and a final purchase receipt will be transmit- 
ted. 

Preferred embodiments of an electronic receipt will have 
complete file integrity so that users may be assured of 
accurate receipt information regardless of the location or io 
possession of an electronic receipt file. File integrity may be 
preserved through independent transmission and storage of 
original receipt information by an independent verification 
service or by other data integrity preservation methods. 

Turning now to FIG. 3, a customer bank lender 39 is 15 
shown handling various vendor accounts 71, 72, and 73, 
debiting and crediting those accounts as authorization is 
received. An authorization processor 30 takes requests from 
devices such as wireless purchasing device 2 and either 
forwards an authorization and response to the request or 2 o 
forwards a denial. If the request cannot be satisfied either 
because of insufficient finds or some other inconsistency in 
the process, then a denial is forwarded to the wireless 
purchasing device. The request forwarded by the wireless . 
purchasing device 2 are received from wireless vending ^ 
devices 61, 62, and 63. The system may operate using 
several scenarios. For example, in one scenario, the owner 
of a wireless purchasing device 2 would place an order from 
wireless vending device 61. Before the order is transmitted 
to wireless vending device 61, the proper ownership of the 
device could be verified through bio metric input 10. Once 30 
verified, the order could be transmitted wirelessly to the 
wireless vending device whereupon the device would 
respond by indicating that there were sufficient quantities of 
product available at the price requested and would transmit 
that information back to the wireless purchasing device 35 
along with an authorization code. The wireless purchasing 
device would then forward the authorization code in a 
request to the authorization processor 30, Authorization 
processor 30 would then locate the appropriate customer 
bank lender 39 and forward the request for transfer of funds. 40 
The customer bank lender would use the authorization code 
to locate the correct vendor account and it would transmit 
funds from the owner of the wireless purchasing device over 
into the account of the vender. Once the funds have been 
transferred, a transfer verification would be forwarded back 

45 

to the authorization processor back to wireless purchasing 
device 2 and forwarded to wireless vending device 61. Upon 
receiving the verification, the vending device would release 
the product to the owner of the wireless purchasing device. 
It should be understood that the wireless vending device 61 
is used only as an example and that purchases can also be 50 
made from any number and type of vendors. 

The present invention may be embodied in other specific 
forms without departing from its spirit or essential charac- 
teristics. The described embodiments are to be considered in 
all respects only as illustrated and not restrictive. The scope 55 
of the invention is, therefore, indicated by the appended 
claims rather than by the foregoing description. All changes 
which come within the meaning and range of equivalency of 
the claims are to be embraced within their scope. 

We claim: 60 

1. A system for use in a wireless purchasing environment 
wherein an electronic receipt is generated by a purchaser- 
owned device at a point of sale, the system comprising: 

a wireless vendor device configured to provide product 
information to the purchaser-owned device; 65 

a remote authorization processor configured to wirelessly 
receive an authorization request from the purchaser- 



owned device, to transmit authorization information to 
the purchaser-owned device, and to transmit the autho- 
rization information to a bank lender to effect a transfer 
of funds; and 

the wireless purchaser-owned device configured to send 
and receive short range communications with the wire- 
less vendor device, to send a long range authorization 
request to the authorization processor, and to receive 
the authorization information from the authorization 
processor, wherein the purchaser-owned device is fur- 
ther configured to store the authorization information 
received from the authorization processor and to trans- 
mit the authorization information to the vendor device 
to effect the purchase of a product or service. 

2. A system as recited in claim 1, wherein the wireless 
purchaser-owned device comprises a biometric input device 
to identify a user. 

3. A system as recited in claim 1, wherein the purchaser- 
owned device is configured to selectively manage the autho- 
rization information with other authorization information 
corresponding to other purchases made. 

4. A system as recited in claim 1, wherein the purchaser- 
owned device is a pda. 

5. In a wireless purchasing environment wherein an 
electronic receipt is generated by a purchaser-owned device 
at a point of sale, a method for effecting a purchase of a 
product or service, the method comprising the steps for: 

obtaining sales information from a wireless vendor; 

sending a long range authorization request from a wireless 
purchaser-owned device to an authorization processor; 

receiving authorization information at the wireless 
purchaser-owned device from the authorization proces- 
sor; and 

transmitting the authorization information from the wire- 
less purchaser-owned device to the wireless vendor 
device to effect the purchase. 

6. A method as recited in claim 5, further comprising the 
steps for: 

receiving biometric information at the purchaser-owned 
device; and 

using the biometric information at the purchaser-owned 
device to identify a user. 

7. A method as recited in claim 5, further comprising the 
step for storing a copy of the authorization information at the 
purchaser-owned device. 

8. A method as recited in claim 7, further comprising the 
step for managing the copy of the authorization information 
and other authorization information on the purchaser-owned 
device that corresponds to other purchases. 

9. A method as recited in claim 5, wherein the wireless 
purchaser-owned device is a pda. 

10. In a wireless purchasing environment wherein an 
electronic receipt is generated by a purchaser-owned device 
at a point of sale, a method for providing authorization to 
effect a purchase, the method comprising the steps for: 

receiving, at an authorization processor, a long-range 
authorization request from a wireless purchaser-owned 
device; 

transmitting authorization information from the authori- 
zation processor to the wireless purchaser-owned 
device to enable the wireless purchaser-owned device 
to provide the authorization information to a wireless 
vendor device to effect the purchase; and 

transmitting a copy of the authorization information to a 
corresponding bank lender to effect a transfer of funds 
corresponding to the purchase. 

11. A method as recited in claim 10, wherein the autho- 
rization request includes information identifying a user of 
the purchaser-owned device. 
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12. A method as recited in claim 11, wherein the identi- 
fication information includes biometric information of the 
user. 

13. A method as recited in claim 11, wherein the autho- 
rization request further includes vendor information pro- 
vided by the vendor device to the purchaser-owned device. 

14. A method as recited in claim 10, further comprising 
the step for transferring the funds from a first account to a 
second account. 



10 



15. A method as recited in claim 14, wherein the first 
account is owned by the purchaser and the second account 
is owned by the vendor. 

16. A method as recited in claim 10, wherein the wireless 
purchaser-owned device is a pda. 
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provider which are verified by the user information system 
to have been accepted by the user of the user device. At least 
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ing to the accepted financial transactions transmitted to the 
at least one intermediate service provider to produce pro- 
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FIG. 3A 



102 



AS A RESULT OF A FINANCIAL TRANSACTION BETWEEN 
THE USER AND THE TRANSACTION PROVIDER, A SET OF 
TRANSACTION DATA T IS GENERATED BY THE 
TRANSACTION PROVIDER'S INFORMATION SYSTEM. 



I 
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THE TRANSACTION DATA T IS TRANSFERRED TO THE USER 
DEVICE, THE USER VERIFIES THAT THE DATA IS CORRECT. 

PROTECTING PRIVACY OF THIS MESSAGE CAN BE 
ACHIEVED THROUGH STANDARD METHODS, SUCH AS SSL. 



106 



108. 



110. 



111 



112 



114 



116 



THE HASH VALUE OF THE TRANSACTION DATA HT 
IS CALCULATED BY THE USER DEVICE. 



THE HASH VALUE HT IS SIGNED USING THE USER 
DEVICE'S PRIVATE KEY a, PRODUCING S a 



I 



A RANDOM SESSION KEY FOR THE INTERMEDIARY 
INTERMEDIATE SERVICE PROVIDER k c IS 
GENERATED BY THE USER DEVICE. 

♦ ~ 



A RANDOM SESSION KEY FOR THE INFORMATION 
SYSTEM k D IS GENERATED BY THE DEVICE. 



THE RANDOM SESSION KEY FOR THE USER INFORMATION 
SYSTEM k D IS ENCRYPTED USING THE TRANSACTION 

PROVIDER PUBLIC KEY, PRODUCING Eg(k D ). 



T 



THE RANDOM SESSION KEY FOR THE INFORMATION SYSTEM 
k D IS ENCRYPTED USING THE INFORMATION SYSTEM'S 

PUBLIC KEY D, PRODUCING E D (k D ). 



THE RANDOM SESSION KEY FOR THE INTERMEDIATE SERVICE 
PROVIDER k c IS ENCRYPTED USING THE INTERMEDIATE 

SERVICE PROVIDER'S PUBLIC KEY C, PRODUCING E c (k c ). 



I 



118 



THE CUSTOMER ID, THE SIGNATURE OF THE TRANSACTION 
DATA HASH VALUE S a AND THE ENCRYPTED USER INFORMATION 

SYSTEM'S SESSION KEY Eo(k D ) ARE ENCRYPTED USING 
INTERMEDIATE SESSION KEY k c PRODUCING E kc (ID, Sa, Eo(k D )) 
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FIG. SB 



EBWDl E c [k c ) AND E kc (ID, S a ,E D (k 0 )) ARE TRANSFERRED TO 
THE TRANSACTION PROVIDER'S INFORMATION SYSTEM. 



THE HASH VALUE OF THE TRANSACTION DATA HT IS CALCULATED 
BY THE TRANSACTION PROVIDER. 



THE HASH VALUE IS SIGNED USING THE TRANSACTION 
PROVIDER'S PRIVATE KEY b, PRODUCING S(,. 



THE ENCRYPTED USER INFORMATION SYSTEM'S SESSION KEY 
E B (kp) IS DECRYPTED USING TRANSACTION PROVIDER'S PRIVATE 

KEY b, RECOVERING kp. 



THE TRANSACTION DATA T IS ENCRYPTED USING THE RECOVERED 
USER INFORMATION SYSTEM'S SESSION KEY kp, PRODUCING 



E kD ( T), HT, E c (k c ), S b AND E k( ,(ID, S a , E D (k D )) ARE 
TRANSFERRED TO THE INTERMEDIATE SERVICE PROVIDER. 



THE ENCRYPTED INTERMEDIATE SERVICE PROVIDER'S SESSION 
KEY E c (k c ) IS DECRYPTED USING THE INTERMEDIATE SERVICE 

PROVIDER'S PRIVATE KEY c RECOVERING k c . 



THE ENCRYPTED USER IDENTIFICATION ID, SIGNATURE 
S a AND THE ENCRYPTED USER INFORMATION SYSTEM'S 
SESSION KEY E D (k D ) ARE DECRYPTED FROM E kc (ID, S a ,E D (k D ) 
USING THE RECOVERED K c . 



THE SIGNATURE S a IS VERIFIED USING THE USER DEVICE'S 

PUBLIC KEY A AND THE RESULT IS COMPARED TO THE 
HASH VALUE HT TO VERIFY THE AUTHENTICITY OF THE MESSAGE. 

THE PUBLIC KEY MAY BE RETRIEVED BASED ON THE USER 
IDENTIFICATION. 



THE USER IDENTIFICATION ID IS USED TO DETERMINE THE 
ADDRESS OF THE USER INFORMATION SYSTEM, 
WHERE THE DATA IS TO BE SENT. 
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FIG 


. 3C 


THE ENCRYPTED USER INFORMATION SYSTEM'S SESSION KEY 
EDWDl THE ENCRYPTED TRANSACTION DATA THE 

TRANSACTION PROVIDER SIGNATURE 5/, AND THE USER DEVICE'S 
SIGNATURE S a ARE TRANSFERRED TO THE USER INFORMATION SYSTEM. 






THE INFORMATION SYSTEM'S SESSION KEY E D {k D ) IS DECRYPTED 

USING THE USER INFORMATION SYSTEM'S PRIVATE KEY d, 
RECOVERING kg 






THE TRANSACTION DATA T IS DECRYPTED USING THE RECOVERED 
USER INFORMATION SYSTEM'S SESSION KEY kp, FINALLY 

REVEALING THE ORIGINAL DATA T 
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146 



THE INTEGRITY AND AUTHENTICITY OF THE INFORMATION AND THE 
IDENTITY OF THE USER DEVICE ARE VERIFIED BY CALCULATING THE HASH 
VALUE OF THE TRANSACTION DATA HT' AND VERIFYING THE SIGNATURE 
USING THE USER DEVICE'S PUBLIC KEY A AND COMPARED WITH THE HT 
RECEIVED FROM THE INTERMEDIATE SERVICE PROVIDER 
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FIG. 4 A 



USER DEVICE A 

INPUT: 
T 

PROCESSING: 
HT= H{T), 
S a = S a {HT), 

kc 
kp, 

E kc {ID,S a ,E D {k D )l 

OUTPUT: 

E B {k D ), 

E c {k c \ 

E kc {lD,S ai E D {k D )) 
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FIG. 4B 



TRANSACTION PROVIDER B 

INPUT: 

T, 

E kc {/D, S a> Ep(k D )) 

PROCESSING: 

HT=H[T\ 

S b = S b {HT\ 

kD=D b {E B {k D )\ 

Ekp ( T ) 

OUTPUT: 

HT, 
E c {kc\ 

E kc {ID, S a> E D {K D )) 
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INTERMEDIATE SERVICE PROVIDER C 

INPUT: 
HT, 

E kc {ID, S a , E D {k D )) 

PROCESSING: 
k c =D c [E c {k c )\ 

ID, S a , E D {k D )=D kc {E kc {ID,S a ,E D (k D ))) 
OUTPUT: 

£k D (n 
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FIG. 4D 



USER INFORMATION SYSTEM D 

INPUT: 
Sa, 

Sb 

PROCESSING: 

kD=D d {E D {k D )\ 
T=D kD {E kD {T)\ 

HT=H{T), 
HT'=V A {S a ) 
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SYSTEM AND METHOD FOR COLLECTING 
FINANCIAL TRANSACTION DATA 

BACKGROUND OF THE INVENTION 

1. Field of the Invention 

The present invention relates to systems and methods for 
gathering financial transaction data. 

2. Description of the Prior Art 

Point of sale systems are in widespread use at which a 
purchaser of goods or services pays with cash or a smart, 
credit or debit card. Transactions involving cards focus upon 
obtaining authorization from the credit or debit financial 
institution from which the purchaser is extended credit or at 
which a debit account is maintained and do not provide the 
purchaser with a detailed analysis of purchases beyond the 
minimum amount of information to permit the identification 
of the financial transaction. The information in billing state- 
ments regarding the purchased goods or services is not the 
equivalent of the receipt obtained at the point of sale by the 
purchaser. Furthermore, the monthly statement provided 
from the credit or debit organization contains insufficient 
information to be a useful tool for business and personal 
accounting and financial management. 

The large body of information which is contained in the 
paperwork or otherwise associated with financial transac- 
tions generated by a point of sale or a business providing 
financial transactions on the internet or otherwise is not 
readily available electronically to the consumer of financial 
services. Paper receipts are voluminous to maintain and the 
collection of meaningful financial information based on 
receipts is a time intensive task for individuals and compa- 
nies. 

U.S. Pat. No. 4,277,837 discloses a personal portable 
terminal for financial transactions which facilitates elec- 
tronic commerce. A personal data and storage transfer card 
is used in association with a personal portable terminal for 
continually monitoring and recording individual financial 
records. Verification of transactions between the user of the 
personal portable terminal and the party providing the 
transaction is facilitated. Storage is provided in the personal 
portable terminal which may be read out at a later date by a 
bank for auditing fund transfer and statement printing pur- 
poses. However, the personal portable terminal does not 
operate in association with a user information system which 
stores verified information including electronic receipts. 

SUMMARY OF THE INVENTION 

The present invention is a system and method for collect- 
ing data pertaining to financial transactions provided by a 
transaction provider which may be any form of commercial 
establishment, such as a point of sale for the purchase of 
goods or services or an entity providing electronic 
commerce, such as the purchase of goods or services over an 
IP network. The information which is collected with the 
present invention is utilized for business and personal 
accounting and financial management. The collected infor- 
mation includes at least an electronic receipt of the financial 
transaction but may also contain additional information 
which is stored by a user information system for facilitating 
business and personal accounting and financial management 
functions to the user. The user device communicates with the 
transaction provider selections of financial transactions 
made by the user of the user device which are offered by the 
user provider and information permitting the transaction 
provider to verify that the electronic receipt has been 
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accepted by the user of the user device. The user information 
system communicates with at least one of the transaction 
provider or the user device and stores at least the electronic 
receipt which is received from the user device or the 
transaction provider which is verified by the user informa- 
tion system to have been accepted by the user of the user 
device. As a result of storage of at least the verified elec- 
tronic receipt, the user information system becomes either a 
personal or business database which stores detailed infor- 
mation about the contents of the transaction and the indi- 
vidual items included in the transaction such as that which 
is typically recorded on a paper receipt. 

The invention provides diverse benefits to users of the 
user device, transaction providers and intermediate service 
providers for developing business associated with the finan- 
cial transaction. Examples are: customer buying information 
management, product buying information management, cus- 
tomer profile management, loyalty management, user infor- 
mation marketing, personal financial management, profes- 
sional financial management and price tracking as described 
below. 

The user information system eliminates the laborious 
process of collecting financial information from analysis of 
paper receipts. The information, including the electronic 
receipt which is stored by the user information system after 
verification, is a complete description of the financial trans- 
action and is unlike the limited summary of information 
provided with a smart, credit or debit card billing statement. 
Instead of what amounts to a summary of each purchase 
which is included in a monthly statement of a smart, credit 
or debit card which is centered upon only the total amount 
of the purchase, the present invention collects substantial 7 
information about the details of each financial transaction,! 
including an electronic receipt, any involved intermediate V 
service provider, such as a bank or other financial institution 
from which smart, credit or debit services were obtained, 
including the identification of any accounts used for the 
financial transactions, the location from which the goods or 
services was purchased and the individual who entered into 
a financial transaction in a situation in which the user 
information system is providing storage of organizational 
information. 

The information stored by the user information system 
records communications between a user of the user device 
and the transaction provider. As part of a financial transac- 
tion agreed upon between a user of the user device and the 
transaction provider, information which is normally 
recorded on a paper receipt is transmitted from an informa- 
tion storage system associated with the transaction provider 
to the information system associated with the user device. 
The communication is typified by communications between 
a cash register at a point of sale and the user device which 
the user is carrying or electronic commerce involving trans- 
action providers which use IP networks to offer their finan- 
cial transactions. The user device may use diverse types of 
softwares, including without limitation a personal financial 
assistance program or a company's accounting or operation 
management system. The information relating to the finan- 
cial transaction including the electronic receipt may contain 
information facilitating automatic processing of the col- 
lected information, such as universal product codes (bar 
codes) representative of the financial transactions. 
Additionally, a user of the user device may annotate the 
information which is collected pertaining to all financial 
transactions with additional comments or classifications 
either at the time of entry into the financial transaction or at 
a later time. The storing of the information by the user 
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information system including the electronic receipt may be , fying the user's device. Simplification of the user's device 

in any form which facilitates personal or business account- eliminates a requirement for complex communication 

ing requirements. capacity and obtains the benefit of the existing communi- 

The communications between the user device and the user cation infrastructure associated with at least the transaction 

information system may be implemented in many ways. For 5 provider and optionally the intermediate service provider to 

example, communications between the transaction provider, facilitate communications of at least the electronic receipt to 

such as a cash register located at a retail point of sale, and the user's information system. The association of the elec- 

the user device may be based upon low power wireless tronic signature with the electronic receipt permits the 

communications such as, for example, the proposed Blue- transaction provider to verify acceptance of the financial 

tooth standard or a physical interface, such as when the user 10 transaction recorded in the electronic receipt. Additionally, 

device is a card, such as a smartcard, which is inserted into the storage of at least the electronic receipt, after verification 

a smart card reader of the transaction provider to transmit of acceptance by the user information system, permits 

data from the card to the transaction provider regarding central processing immediately by the user information 

selections or verifications of the financial transaction, e.g. an system. A memory of the user device, including a memory 

electronic signature. The user device may contain memory 35 in a smartcard, provides a log of financial transactions which 

and communication capabilities which facilitate the storage can be compared at a later time with the information stored 

by the user device of at least the electronic receipt which is in the user information system to verify that the transaction 

stored by the user information system after verification. information has actually been received. 

Alternatively, the user device may communicate directly In view of the complete nature of the information con- 

with the user information system after a verification of the 2 o tained in an electronic receipt associated with ;a financial 

financial transaction between the user and the transaction transaction and other optional information which is gathered 

provider via communication mediums such as cellular com- by the user device, suitable forms of encryption may be 

munications using short message service (SMS). The user utilized to protect the identity of the user device and any 

device may be a mobile terminal including a telephone sensitive information which is being transmitted between the 

interface with a personal digital assistant (PDA). 2 s user device, user information system, optional intermediate 

Alternatively, the user device may contain communication service provider and the user information system. The user 

capability with a IP network, such as the internet, to enter device may encrypt the identity of the user from at least the 

into financial transactions with the transaction provider. transaction provider and may also encrypt the contents of the 

While in a preferred embodiment the user device contains electronic receipt from being accessed by the intermediate 

communication capabilities and substantial memory, the 30 service provider. The intermediate service provider, which 

present invention is not limited to the user device having may be a financial institution, may also protect the purchas- 

either communication capability or memory for storing er's identify when the identity of the user is encrypted with 

electronic receipts and other information. As an alternative, transmissions between the user device and the transaction 

the user device may be a device such as, but not limited to, provider. 

a smart card which provides only a digital signature of the 35 The processing and communication capabilities of the 
user to the transaction provider, which enables the transac- optional intermediate service provider may be utilized in 
tion provider to forward at least the user authorized elec- place of providing substantial processing and communica- 
tronic receipt and other information to the user information tion capability in the user device. When the user device has 
system optionally through an intermediate service provider. limited computing and communication capability, such lim- 
Forwarding of at least the electronic receipt to the user 40 ited capability may be used for the review of the electronic 
information system may be directly or through the afore- receipt from the transaction provider and signing thereof to 
mentioned intermediate service provider, which processes permit the transaction provider to verify the transaction has 
information relating to the accepted financial transaction been accepted by the user and then utilize either the trans- 
transmitted by the transaction provider to the intermediate action provider's or the optional intermediate service pro- 
service provider to produce processed information pertain- 45 vider's additional processing and communication capability 
ing to the accepted financial transactions. The intermediate to further process or transmit at least the electronic receipt 
service provider may be, without limitation, a financial in a protected (encrypted) format to the user information 
institution, such as a bank or a smart, credit or debit card system where after verification it is stored, 
clearinghouse, which processes the information relating to A system for collecting transaction data in accordance 
the selected financial transaction against an account which 50 with the invention includes a transaction provider which 
the user has with the intermediate service provider. provides at least an electronic receipt of financial transac- 
The generation of an electronic signature by the user tions offered by the transaction provider; a user device, in 
device has two purposes. First, the signature prevents the communication with the transaction provider, which pro- 
transaction provider or another party from falsifying the vides to the transaction provider a selection by a user of the 
electronic receipt and other information which has been 55 user device of a financial transaction offered by the trans- 
accepted by the user of the user device and furthermore, action provider and in response to receipt of an electronic 
provides the transaction provider, such as a merchant with receipt an acceptance of the financial transaction recorded in 
authorization, to transmit at least the electronic purchase the electronic receipt; and a user information system, 
information to the intermediate service provider, such as the coupled to at least one of the transaction provider or the user 
user's financial institution where the amount of the transac- 60 device, which stores at least electronic receipts which are 
tion is posted against the user's account. The user informa- received from the user device or the transaction provider 
tion system provides verification of the information received which are verified by the user information system to have 
from the transaction provider and may accept only informa- been accepted by the user of the user device. The user device 
tion that has been properly electronically signed. Utilization may be a mobile terminal in wireless communication with at 
of the transaction provider's information system, instead of 65 least the transaction provider, a personal digital assistant in 
relying upon the user's device for transmitting at least the wireless communication with at least the transaction 
electronic receipt, provides a substantial benefit in simpli- provider, or a smart card which is read by a smart card reader 
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at the transaction provider to obtain at least the selection by 
the user of the financial transaction and information permit- 
ting the transaction provider to verify that the electronic 
receipt is accepted by the user of the user device. The user 
device may add to the electronic receipt additional informa- 
tion which is used by the user information system in 
processing at least the electronic receipts stored by the user 
information system information. The information provided 
by the user device to permit the transaction provider to 
verify that the electronic receipt is accepted may comprise 
an electronic signature. The user information system also 
may verify at least any received electronic receipts with the 
electronic signature. The user device may add to the elec- 
tronic receipt comments from the user providing additional 
information about the financial transaction beyond informa- 
tion contained in an electronic receipt. 

A system for collecting transaction data in accordance 
with the invention also includes a transaction provider which 
provides at least an electronic receipt of financial transac- 
tions obtained from the transaction provider; a user device, 
in communication with the transaction provider, which 
provides to the transaction provider a selection by a user of 
the user device of a financial transaction offered by the 
transaction provider and in response to receipt of an elec- 
tronic receipt, an acceptance of the transaction recorded in 
the received electronic receipt; an intermediate service 
provider, coupled to the transaction provider, which pro- 
cesses information relating to the accepted financial trans- 
action transmitted by the transaction provider to the inter- 
mediate service provider to produce processed information 
pertaining to the accepted financial transaction; and a user 
information system, coupled to the intermediate service 
provider, which stores at least electronic receipts which are 
received from the intermediate service provider which are 
verified by the user information system to have been 
accepted by the user of the user device. The intermediate 
service provider may be a financial institution which pro- 
cesses the information relating to the accepted financial 
transaction against an account which the user has with the 
intermediate service provider. The user device may add to 
the electronic receipt additional information which is used 
by the user information system in processing at least the 
electronic receipts stored by the user information system. 
The information provided by the user device to permit the 
transaction provider to verify that the electronic receipt is 
accepted may comprise an electronic signature. The user 
information system may also verify at least any received 
electronic receipts with the electronic signature. The user 
device may encrypt an identity of the user from at least the 
transaction provider. The user device may also encrypt the 
contents of the electronic receipt from being accessed by the 
intermediate service provider. The financial institution may 
validate the information relating to the accepted financial 
transaction is associated with the account of the user. 

A process for collecting transaction data in accordance 
with the invention includes providing from a transaction 
provider to a user device at least an electronic receipt of a 
financial transaction obtained by the user from the transac- 
tion provider; providing a verification from the user device 
to the transaction provider that at least the electronic receipt 
is accepted by a user of the user device; transmitting from 
either the transaction provider or the user device to a user 
information system at least the electronic receipt; and stor- 
ing at least the electronic receipt with the user information 
system when at least the electronic receipt is verified to have 
been accepted by the user of the user device. The user device 
may add to the electronic receipt additional information 
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which is used by the user information system in processing 
at least the electronic receipt stored by the user information 
system. Information may be provided by the user device to 
the transaction provider to permit the transaction provider to 

5 verify that the electronic receipt is accepted by the user of 
the user device. The information system used to verify the 
acceptance of received electronic receipts by the user of the 
user device may be an electronic signature. The transaction 
provider may also provide to the user device electronic data 

10 identifying financial transactions which are offered by the 
transaction provider. 

A process for collecting transaction data in accordance 
with the invention includes providing from a transaction 
provider to a user device at least an electronic receipt of a 

15 financial transaction obtained by the user from the transac- 
tion provider; providing a verification from the user device 
to the transaction provider that at least the electronic receipt 
is accepted by a user of the user device; transmitting 
information relating to the accepted financial transaction 

20 from the transaction provider to an intermediate service 
provider; processing the information relating to the accepted 
financial transaction by the intermediate service provider to 
produce processed information pertaining to the accepted 
financial transaction; and receiving at least the electronic 

25 receipt with a user information system from the intermediate 
service provider and storing at least the electronic receipt 
when at least the electronic receipt is verified by the user 
information system to have been accepted by the user of the 
user device. The intermediate service provider may be a 

30 financial institution which processes the information relating 
to the accepted financial transaction against an account 
which the user has with the intermediate service provider. 
The user device may add to the electronic receipt additional 
information which is used by the user information system in 

35 processing at least the electronic receipt stored by the user 
information system. Information is provided by the user 
device to the transaction provider to permit the transaction 
provider to verify that the electronic receipt is accepted. The 
information may comprise an electronic signature. The user 

40 device may encrypt an identity of the user from at least the 
transaction provider. The financial institution may validate 
the information relating to the accepted financial transaction 
is associated with the account of the user. The financial 
institution may provide information to the user information 

45 system that the financial transaction has occurred between 
the user and transaction provider. 

The transaction provider and the intermediate service 
provider perform the following functions: the intermediate 
service provider may provide the transaction provider with 

50 an analysis of financial transactions accepted by the user of 
the user device which may be a statistical analysis; the 
transaction provider may provide an analysis of sales of 
particular types of financial transactions to manufacturers of 
products which are involved with the sale which may 

55 involve at least one of location and time that the sales were 
made; the transaction provider may create profiles of a user 
of the user device based on types of purchases which are 
made; the transaction provider may provide a tabulation of 
purchases made by users of the user device which may be 

60 provided by the transaction provider to a manufacturer of 
products purchased with each financial transaction; the 
intermediate service provider may provide a history of a user 
financial transaction to another for a benefit of the user; the 
intermediate service provider may provide a user of the user 

65 device with an analysis of the users history of financial 
transactions which may identify types of financial transac- 
tions which the user has accepted and the analysis group 
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products which are involved in financial transactions accord- 
ing to categories; the analysis may compare the user's 
history of financial transactions with a history of financial 
transactions of others; and the user device may be used by 
members of an organization and information of multiple 
users is combined in the user information system. 

A system for collecting transaction data in accordance 
with the invention includes a plurality of transaction 
providers, each transaction provider providing at least an 
electronic receipt of financial transactions obtained there- 
from; a plurality of user devices, in communication with the 
plurality of transaction providers, which provide to at least 
one transaction provider a selection by a user of each user 
device of a financial transaction offered each transaction 
provider and in response to receipt of an electronic receipt 
an acceptance of the transaction recorded in the received 
electronic receipt; at least one intermediate service provider, 
coupled to each transaction provider, which processes infor- 
mation relating to the accepted financial transaction trans- 
mitted by each transaction provider to the at least one 
intermediate service provider to produce processed infor- 
mation pertaining to the accepted financial transaction; and 
at least one user information system, coupled to at least one 
intermediate service provider, each user information system 
storing at least electronic receipts which are received from 
each intermediate service provider which are verified by the 
at least one user information system to have been accepted 
by the user of each user device. The intermediate service 
provider may provide to at least one user of the user devices 
information on price differences at different locations at 
which the plurality of transaction providers are located. 

BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 illustrates a block diagram of an embodiment of a 
system for collecting transaction data in accordance with the 
present invention. 

FIG. 2 illustrates an example format of at least the 
electronic receipt which is stored by a user information 
system in accordance with the present invention. 

FIGS. 3A-3C illustrate a flowchart of one embodiment of 
a process for collecting transaction data in accordance with 
the present invention. 

FIGS. 4A-4D illustrate the inputs, processes and the 
outputs of the process of FIGS. 3A-3C. 

Like reference numerals identify like parts throughout the 
drawings. 

DESCRIPTION OF THE PREFERRED 
EMBODIMENTS 

FIG. 1 illustrates a block diagram of a system 10 for 
collecting transaction data in accordance with the invention. 
Financial transactions and financial data should be under- 
stood to describe without limitation any transaction which 
involves exchange of monetary or other value between the 
user(s) of at least one user device 14 and at least one 
transaction provider 12. The system 10 is comprised of at 
least one transaction provider 12, at least one user device 14 
which communicates with the transaction provider 12 over 
either a physical connection, wireline or a wireless commu- 
nication link 16, at least one user information system 18, 
which communicates with the user device 14 over a com- 
munication link 19, which may be wireless or wireline or 
through at least one intermediate service provider 20 which 
communicates directly with the transaction provider 12 over 
a communication link 22, which may be wireless or 
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wireline, and directly by communication link 24 with the 
user information system which may be either a wireless or 
a wireline link. It should be understood that only a single 
translation provider 12, user device 14, user information 

5 system 18 and intermediate service provider 20, have been 
illustrated for the purpose of simplifying illustration of a 
system in accordance with the present invention but, in 
practice, the invention is practiced with plural transaction 
providers, user devices, user information systems and inter- 

10 mediate service providers and the necessary illustrated com- 
munication links 16, 20, 22 and 24. 

The transaction provider 12 may be, without limitation, 
any entity which provides financial transactions, such as, but 
not limited to, a retail organization, any point of sale (POS) 

15 entity or an entity providing electronic commerce, such as 
entities operating on IP networks. The transaction provider 
12 may include a server with a database which manages the 
generation of electronic receipts by the transaction provider 
in response to selection of financial transactions offered by 

20 the transaction provider 12 by the user of the user device 14 
and further verification that the electronic receipt transmitted 
by the transaction provider 12 to the user device 14 has been 
accepted by the user device to be correct. The verification of 
acceptance of at least the electronic receipt by the transac- 

25 tion provider 12 may be an electronic signature generated by 
any known technique or mechanism and provides the legal 
basis for the transaction provider to signal the intermediate 
service provider 20 that the financial transaction has been 
accepted by the user of the user device. Without limitation, 

30 the intermediate service provider typically is a financial 
institution offering smart, credit or debit services to the user 
of the user device 14 which the user has authorized to be 
processed by the financial transaction against the user's 
account. The transaction provider 12 in a retail or other point 

35 of sale configuration typically contains a register for storing 
cash and smart, credit or debit card receipts and processing 
and communication capability for management of inventory, 
etc. and communication capability directly (not illustrated) 
with the user information system 18 or with the intermediate 

40 service provider 20. The transaction provider 12 may trans- 
mit substantial information over the communications link 16 
to the user device 14 which advertises or otherwise com- 
municates information about a wide range of financial 
transactions which are offered by the transaction provider in 

45 order to induce the user of the user device 14 lo enter into 
financial transactions with the transaction provider 12. The 
user device 14, may be diverse in nature and may be a smart 
card, a mobile terminal including a wireless, telephone or 
short range wireless communication link, such as the pro- 

50 posed Bluetooth specification, a PDA, etc. The user device 
14 typically contains a processor and associated memory 
and the aforementioned communication capability providing 
communications over links 16 and 20. 

The transaction provider 12 provides at least an electronic 

55 receipt of financial transactions offered, by the transaction 
provider to the user of the user device 14 but typically also 
provides electronic data transmissions identifying financial 
transactions which are offered by the transaction provider 
which is a mechanism to induce purchase by the user of the 

60 user device 14 of financial transactions offered by the 
transaction provider 12. The user device 14 communicates 
over communication link 16 with the transaction provider 12 
a selection by the user of the user device of a financial 
transaction offered by the transaction provider. Additionally, 

65 information is provided by the user device 14 to the trans- 
action provider 12, after receipt by the user device of the 
electronic receipt, permitting the transaction provider to 
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verify that the electronic receipt is accepted by the user. This 
verification information may without limitation be an elec- 
tronic signature or simply an acknowledgment that the 
information contained in an electronic receipt transmitted by 
the transaction provider 12 to the user device 14 is acknowl- 
edged by the user of the user device to be accepted as a 
binding transaction. 

The user information system 18 includes a processor and 
associated memory which stores at least electronic receipts 
which are received from the user device via direct commu- 
nications over communication link 19 or, alternatively, by 
communication from the user device 14 over communica- 
tion link 16 to the transaction provider 12, from the trans- 
action provider 12 over communication link 22 to the 
intermediate service provider 20 and from the intermediate 
service provider 20 over communication link 24 to the user 
information system or directly from the transaction provider 
22 such as when the intermediate service provider 20 is not 
present or is not operative. The user information system 18 
includes softwares which process; at least the electronic 
receipt to permit verification as accepted by the user of the 
user device before storage in the memory. If the user 
information system 18 is an organization's system, such as 
a company, the processor may be in a server or part of a 
network of computers of the organization. The softwares 
may be diverse in nature and may include without limitation 
programs for accounting and financial management of the 
user of the user device 14 and decrypting of information as 
described below in FIGS. 3A-3C. These softwares provide 
a basis for decision making and maintaining personal or 
company budgets to provide prudent financial management 
and furthermore, facilitate the collection of transaction 
information in electronic form in the same manner in which 
the information was created by the transaction provider 12 
as accepted by the user of the user device 14. 

A preferred form of verification utilizes an electronic 
signature generated by the user of the user device 14. The 
electronic signature, generated by any known technique, 
which is transmitted by the user device 14 to the transaction 
provider 12 in response to receipt of at least an electronic 
receipt from the transaction provider, permits the transaction 
provider to authorize the intermediate service provider 20 to 
post the financial transaction against the smart, credit or 
debit account of the user of the user device 14 maintained by 
the intermediate service provider 20 which may be a bank or 
other financial institution. In addition to the approval of the 
electronic receipt and the financial transaction, additional 
information may be associated with the financial transaction 
by the user of the user device which is used by the user 
information system 18 in processing at least the electronic 
receipt stored by the user information system memory. Such 
additional information may be comments or personal anno- 
tations provided by the user of the user device 14 or 
information to be used during a processing of at least the 
electronic receipt by the user information system including 
software, etc. The electronic signature which is added by the 
user of the user device 14 to the electronic receipt prevents 
the transaction provider or a third party from falsifying the 
information of the accepted electronic receipt end further 
provides a preferred basis for the user information system 18 
to verify that information transmitted thereto is information 
accepted by the user of the user device which should be 
stored in the memory in the user information system. 

In view of the sensitivity of the substantial quantity of 
information which may be generated by the transaction 
provider 12 in the electronic receipt and further personal 
information which the user of the user device 14 may wish 
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to annotate or otherwise associate with the electronic receipt 
in confidential form which is safeguarded from being dis- 
closed or available to unauthorized individuals, it is possible 
to conceal the user's identity from the transaction provider 
5 and details of the financial transaction other than those 
necessary to perform smart, credit or debiting services on 
behalf of the user of the user device 14 by the intermediate 
service provider 20. This concealment may be accomplished 
by any known encrypted/decryption processes. 

10 FIG. 2 illustrates an example of user information 30 
which is stored in the memory of the user information 
system 18 including an electronic receipt 34. It should be 
understood that the user information 30 is only exemplary of 

i5 possible types of information which may be stored and the 
form of storage of information stored by the user informa- 
tion system 18. The user information 30 includes identifi- 
cation information 32 of the user device 14 which may be of 
any diverse type, such as a social security number or other 
individual identification issued by countries of the user, 
company, etc., an electronic receipt 34, account information 
36, and other information 38. The identification information 
32 is utilized in the process described below in conjunction 
with FIGS. 3A-3C and FIGS. 4A-4D at least to obtain the 
address of the user identification information system 18 to 
which information is transmitted by the intermediate service 
provider 20 but may have other functions. The electronic 
receipt 34 may contain a whole host of identifying infor- 
mation regarding the financial transaction, such as, but not 

3Q limited to, the information which is provided on a paper 
receipt but also including additional information such as 
product attributes, quantity, manufacturers' s identity, EAN 
codes, such as a UPC code, which may be stored in any 
agreed upon format. The electronic receipt 34 is information 

35 which in the prior art was not provided by the billing 
statements from intermediate service providers 20 to the 
user in a normal smart, credit or debit card statement 
provided on a monthly basis and is the information which is 
highly useful in the user's accounting and/or financial man- 
agement functions and further, to the transaction provider 

40 12, the user of the user device 14 and the intermediate 
service provider 20 as a source of beneficial or saleable 
information as described below. The account information 36 
is the customary information, such as a smart, credit or debit 
account number or other identification of services provided 
by the intermediate service provider 20. Finally, the other 
information 38 is symbolic of diverse forms of information 
which the user of the user device 14 wishes to store in the 
memory of the user information system 18 or otherwise use 

5o during the processing of information received by the user 
information system prior to storage in the memory and may 
without limitation include comments provided by the user of 
the user device 14 which annotate the particular financial 
transaction represented by the user information 30 and any 
softwares used to support storage or processing of the user 
information. The other information 38 may also be the 
source of information sold by the transaction provider 12 
and/or the intermediate service provider 20 to the third 
parties as described below. It should be understood that the 
user information system 18 may be a company financial 
information system implemented in a server, an individual's 
home PC or otherwise. 

The transaction provider 12 and the intermediate service 
provider 20 have a number of attractive possibilities for 
65 developing a business around the financial transaction infor- 
mation generated between the transaction provider and the 
user device 14, The categories of information are as follows: 
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1. CUSTOMER BUYING INFORMATION MANAGE- categories. This way the user can for example follow, how 
MENT much money has been used for food, clothing, home, car, 

Most importantly, if the customer identity is hidden by amusement and other major categories at different times, 

encryption or otherwise from the transaction provider 12, This information can be connected to financial planning 

the transaction provider has no way of identifying repeated 5 applications, to enable the user to plan and follow their 

purchases by the same customer. The intermediate service consumption in detail. The intermediate service provider 20 

provider 20 may provide transaction providers 12 with may provide the user with such planning services as well, 

statistical analysis of their customer's buying habits, or if The service can also compare the purchasing behavior of 

allowed by the user, even the complete anonymous buying the user, or user's household, to other similar users to show 

histories of single users. Additionally, if one transaction 10 how the behavior differs from the typical user with the same 

provider 12 serves multiple transaction provider locations of background and income level. 

the same type, for example grocery stores, the transaction Additionally, the information of purchases can be linked 

provider 12 may provide information on how the buying to other sources of information. For example, the purchased 

patterns of the customers of one store are different from food items can be mapped to corresponding nutritional 

buying patterns in other stores or buying patterns in general. 15 information, to provide the user with an indication of the 

This may take place, again, without revealing information of healthiness of his diet. 

any other individual store. 7. PROFESSIONAL FINANCIAL MANAGEMENT 

2. PRODUCT BUYING INFORMATION MANAGE- When a financial management service is provided to a 
MENT commercial company, the information from multiple users 

The same kind of analysis as consumer buying informa- 20 can be automatically combined. Moreover, the information 

tion is also possible on the product level. The transaction of purchases is available in almost real time, which may be 

provider 12 may give product manufacturers information significant to a large travelling work force or multiple 

about how the sales of the product vary in different locations remote sites, 

and at different times. Also, the buying histories of custom- 8. PRICE TRACKING 

ers who have purchased the product can be compared to 25 The intermediate service provider 20 may provide users 

those who have not done so, or to those who have bought a with information on price differences in different locations, 

competing product. This information can be used to analyze It may allow the user to search for the lowest price of a 

the segmentation of the market, for example to find that product in an area, or calculate price indexes for groups of 

product A is favored over product B by heavy users. Buying products, such as groceries. Moreover, it can compare the 

of certain products together (e.g. refreshments) can also be 30 prices of a user's buying history at different locations to 

analyzed. suggest the one that would have been the most inexpensive 

3. CUSTOMER PROFILE MANAGEMENT for the user. 

The transaction provider 12 can create profiles of cus- FIGS. 3A-3C illustrate a preferred embodiment of a 

tomers based on their buying behavior. This information process for collecting transaction data in accordance with 

may be sold to third parties in an anonymous format and 35 the present invention which uses available cryptographic 

linked to other analysis. methods involving random session keys encrypted using 

4. LOYALTY MANAGEMENT public key crypto logy. The described embodiment includes 
The transaction provider 12 can act as a loyalty scheme a protocol which hides the user's identity from the transac- 

manager for transaction providers, or for product manufac- tion provider 12 and optionally, the intermediate service 
turers. The transaction provider can prove for the transaction 40 provider 20 when desirable. The intermediate service pro- 
provider, that a certain number of purchases have been made vider 20 validates the information pertaining to the financial 
by a certain user that gives the customer the right to receive transaction and the user's identity and only allows the 
some benefit (or that any other condition is fulfilled). If the validated information to be processed. The aforementioned 
user wishes, the user may reveal its identity to the transac- encryption also protects against third party unauthorized 
tion provider 12 in exchange for the benefit. 45 access when information is being transmitted between the 
On the product buying level, the transaction provider 12 various parts of the system of FIG. 1. The process for 
can accumulate purchases independent of the buying loca- collecting transaction information further permits verifica- 
tion (e.g. a certain grocery chain). For example, if a user tion that all of the transactions which have take place are 
buys Coca Cola® from different locations for a certain correctly reported to the user information system, 
amount during a given period, the transaction provider may 50 Prior to description of each of the steps in FIGS. 3A-3C, 
inform the user is eligible for a bonus CD from the Coca the following notations are defined as used in FIGS. 3A-3D 
Cola Company. and 4A-4D: 

5. USER INFORMATION MARKETING E^M) Encryption of message M, using key k 
More generally, the intermediary service provider 20 may signature of messag e M, using key k 

market the information to third parties about the user's 55 ^ ^. .. c KM . , 

. . - Luirra- u , * • Djl(M) Decryption of message M, using key k 

buying history in behalf of the user, who wants to receive T , „ . w . , , 

money or other benefits in exchange. In this case, it is again V *(M) Verfication of message M, using key k 

essential that the user's identity can be protected from the H (M) A one-way hash value of a message M 

transaction provider 12 by encryption or other techniques. k p A randomly generated session key for party P 

6. PERSONAL FINANCIAL MANAGEMENT 60 A The user device 14 

The intermediate service provider 20 may provide the B transaction provide 12 

users with a service detailing their consumption habits and c ^ intermcdiate scrvice provider 20 

history. This kind of service can be provided over the web . r . 0 

, J . , , , , , c t r c 1C . , D The user information system 18 

or by using standard data formats for personal financial . . ; . 

management software (i.e. Quicken). 65 T A message containing the transaction data 

The service can both give detailed records of committed HT«H(T) Hash value of the transaction data 

purchases to the user, but in addition, to group products to ID Customer identification 
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A random session key for the intermediate service key B^^) is decrypted using the transaction providers 

provider 20 private key "b", recovering k D . Processing proceeds to step 

E*( ) Encryption using the intermediate service provid- * 28 whe f thc transaction data T is encrypted using the 

er's session key recovered user information system's session key k D , pro- 

. , . , 5 ducing E„(T). Processing proceeds to step 130 where the 

k D A random session key for the user information system quaat i t ies; EJDfl), HT, E c (k c ), S b and E,C(ID), S a , E D (k D )) 

^ are transferred to the intermediate service provider 20. 

E* ( ) Encryption using the user information system's Processing proceeds to step 132 where the encrypted inter- 
session key mediate service provider's session key E c (k c ) is decrypted 

E^ ) Encryption using the transaction provider's public 10 usin g ^ intermediate service provider's private key "c", 

recovering k c . Processing proceeds to step 134 where the 

. ..... , - *j j encrypted user identification ID, signature S a and the 

Ec( ^Encryption using the intermediate service provider s encr J pted ^ eT information system's session key E D (k D ) are 

public key decrypted from E^D), S fl , E D (k D )) using recovered k f . 

E D ( ) Encryption using the user information system's Processing proceeds to step 136 where the signature S a is 

public key 15 verified using the user device's public key A and the result 

D b ( ) Decryption using the transaction provider's private is compared to the hash value HT to verify the authenticity 

k ey of the message. The public key may be retrieved based upon 

n / \ „j- - „. * . the customer identification. Processing proceeds to step 138 

D J ) Decryption using the intermediate service provider s , .. T n • j . j * • ( l 

■ t L where the customer identification ID is used to determine the 

pnva e ey 2Q ac j(j ress 0 f me user information system where the data is to 

) Decryption using the user information system's be sent. Processing proceeds to step 140 where the encrypted 

private key user information system's session key E D (k D ), the encrypted 

S fl -S a (HT) Signature of the transaction data hash value transaction data Efi(T) y the transaction provider's signature 

generated by the user device 14 s b and the user device's signature S a are transferred to the 

S fc =S fc (HT) Signature of the transaction data hash value 25 user information system 18. Processing proceeds to step 142 

generated by the transaction provider where the user information system's session key S D (k D ) is 

With reference to FIGS. 3A-3C, the process 100 starts at decrypted using the user information system's private key 

point 102 where a financial transaction has occurred "d", recovering k^. Processing proceeds to step 144 where 

between the user of the user device 14 and the transaction the transaction data T is decrypted using the recovered user 

provider 12 which results in a set of transaction data T being 30 identification system's session key k^, finally revealing the 

generated by the transaction provider's information system. original transaction data T. Processing proceeds to step 146 

The process proceeds to step 104 where the transaction data where the integrity and authenticity of the transaction data 

T is transferred to the user device 14 and the user device and the identity of the user device are verified by calculating 

verifies that the data is correct. Protection of privacy of this the hash value of the transaction data HT and verifying the 

message can be achieved through standard methods such as 35 signature using the user's public key A and compared with 

SSL. Processing proceeds to step 106 where the hash value the HT received from the intermediate service provider 20 

of the transaction data HT is calculated by the user device which is the end of the process. 

14. Processing proceeds to step 108 where the hash value HT FIGS. 4A-4D identify the inputs, processings and outputs 
is signed by the user using the user device's private key "a" respectively of the user device 14, transaction provider 12, 
producing the quantity S a . Processing proceeds to step 110 40 intermediate service provider 20 and user information sys- 
where a random session key K^. for the intermediate service tem 18 of the process of FIGS. 3A-3C. The letter identifi- 
provider 20 is generated by the user device 14. Processing cations "A-D" are respectively used in the various sub- 
proceeds to step 111 where a random session key k D for the scripts contained in the inputs, processings and outputs of 
user information system is generated by the user device 14. the process of FIGS. 3A-3C to respectively identify the 
Processing proceeds to step 112 where the random session 45 transaction provider 12, user device 14, user information 
key k^ for the user information system 18 is encrypted using system 18, and the intermediate service provider 20. 
the transaction provider's public key, producing E B (k D ). Additionally, the intermediate service provider 20 may 
Processing proceeds to step 114 where the random session have the electronic receipt and additional information trans- 
key kp for the user information system 18 is encrypted using mitted thereto from the transaction provider 12 in non- 
the user information system's public key D, producing 50 encrypted form in order to permit the intermediate service 
EbQlz,). Processing proceeds to step 116 where the random provider to achieve profits or otherwise make financial use 
session key k c for the intermediate service provider 20 is of the information therein as described above. This may be 
encrypted using the intermediate service provider's public achieved by transmitting the information from the transac- 
key C, producing E c (k c ), Processing proceeds to step 118 tion provider 12 to the intermediate service provider 20 
where the customer identification ID, the signature of the 55 using a hybrid encryption based upon the intermediate 
transaction data hash value S a and the encrypted user service provider's public key. 

information system's session key E^k^) are encrypted Furthermore, if the intermediate service provider stores 

using the intermediate service provider's session key k c , both S a which equals S a (HT) and S fc equal S fc (HT), disputes 

producing E* , ID, S fl , E^k^), Processing proceeds to step may later be resolved by the intermediate service provider 

120 where the quantities E B (k D ), E c (k c ) and E^(ID, S a , 60 between the user of the user device 14 and the transaction 

E B (k D )) are transferred to the transaction provider's infor- provider 12. If either the user of the user device 14 or the 

mation system. Processing proceeds to step 122 where the transaction provider 12 reveals the transaction data T, the 

hash values of the transaction data HT is calculated by the intermediate service provider 20 may calculate if the quan- 

transaction provider. Processing proceeds to step 124 where tity HT equals H(T) and then verify whether the information 

the hash value is signed using the transaction provider's 65 was authenticate using the corresponding public keys, 

private key "b" producing S b . Processing proceeds to step Similarly, the signature S b may be transferred to the user 

126 where the encrypted user's information system's session device 14, which encrypts the signature using the interme- 
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diate service provider's session key before sending it for- 
ward. A log of all transaction times and signatures is 
therefore retained in the user device 14. If the user infor- 
mation system 18 has not received all transactions stored in 
the log, the user's possession of the signature may be used 
to prove that a questioned transaction actually took place. 

Additionally, the intermediate service provider 20 may 
return a receipt of the received information to the transaction 
provider 12 thereby noting that the information transmitted 
by the transaction provider to the intermediate service 
provider was received correctly. 

Finally, a simple protocol may be used to detect the 
comments and other information produced by the customer 
which do not pertain to the more sensitive electronic receipt 
and other transaction data. 

While the invention has been described in terms of its 
preferred embodiments, it should be understood that numer- 
ous modifications may be made thereto without departing 
from the spirit and scope of the invention as defined in the 
appended claims. It is intended that all such modifications 20 
fall within the scope of the appended claims. 

What is claimed is: 

1. A system for collecting transaction data comprising: 

a transaction provider which provides at least an elec- 
tronic receipt of financial transactions offered by the 
transaction provider; 

a user device, in communication with the transaction 
provider, which provides to the transaction provider a 
selection by a user of the user device of a financial 
transaction offered by the transaction provider and the 
user device in response to receipt of an electronic 
receipt provides an acceptance of the financial trans- 
action recorded in the received electronic receipt to the 
transaction provider; and 

a user information system, coupled to at least one of the 
transaction provider or the user device, which stores at 
least electronic receipts which are received from the 
user device or the transaction provider which are veri- 
fied by the user information system to have been 
accepted by the user of the user device. 

2. A system in accordance with claim 1 wherein: 
the user device is a mobile terminal in wireless commu- 
nication with at least the transaction provider. 

3. A system in accordance with claim 2 wherein: 
the user device adds to the electronic receipts additional 

information which is used by the user information 
system in processing at least the electronic receipts 
stored by the user information system. 

4. A system in accordance with claim 1 wherein: 
the user information system comprises a processor and a 

memory with the memory storing at least electronic 
receipts only after the verification of acceptance of the 
electronic receipts by the user; and 
the processor provides at least one of accounting service 
and financial management service to the user. 

5. A system in accordance with claim 4 wherein: 
the user device adds to the electronic receipt additional 

information which is used by the user information 
system in processing at least the electronic receipts 
stored by the user information system. 

6. A system in accordance with claim 4 wherein: 
the user information system stores in the memory trans- 
action information of the user, is operated by a com- 
pany physically separated from the user and is con- 
nected to the user device by a wireless link. 
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7. A system in accordance with claim 1 wherein: 

the user device is a smart card which is read by a smart 
card reader at the transaction provider to obtain at least 
the acceptance by the user of the financial transaction 
and the information permitting the transaction provider 
to verify that the electronic receipt is accepted by the 
user of the user device. 

8. A system in accordance with claim 7 wherein: 

the user device adds to the electronic receipt additional 
information which is used by the user information 
system in processing at least the electronic receipts 
stored by the user information system. 

9. A system in accordance with claim 7 wherein: 

the information provided by the user device to the trans- 
action provider to permit the transaction provider to 
verify that the electronic receipt is accepted by the user 
of the user device comprises an electronic signature. 

10. A system in accordance with claim 9 wherein: 

the user information system also verifies at least any 
received electronic receipts with the electronic signa- 
ture. 

11. A system in accordance with claim 1 wherein: 

the user device adds to the electronic receipt additional 
information which is used by the user information 
system in processing at least the electronic receipts 
stored by the user information system. 

12. A system in accordance with claim 11 wherein: 

the information provided by the user device to the trans- 
action provider to permit the transaction provider to 
verify that the electronic receipt is accepted by the user 
of the user device comprises an electronic signature. 

13. A system in accordance with claim 11 wherein: 

the user information system also verifies at least any 
received electronic receipts with the electronic signa- 
ture. 

14. A system in accordance with claim 1 wherein: 

the user device adds to the electronic receipt comments 
from the user providing additional information about 
the financial transaction beyond information contained 
in an electronic receipt. 

15. A system in accordance with claim 1 wherein: 

the information provided by the user device to the trans- 
action provider to permit the transaction provider to 
verify that the electronic receipt is accepted by the user 
of the user device comprises an electronic signature. 

16. A system in accordance with claim 10 wherein: 

the user information system also verifies at least any 
received electronic receipts with the electronic signa- 
ture, 

17. A system in accordance with claim 1 wherein: 

the transaction provider also provides to the user device 
electronic data identifying financial transactions which 
are offered by the transaction provider. 

18. A system for collecting transaction data comprising: 
a transaction provider which provides at least an elec- 
tronic receipt of financial transactions obtained from 
the transaction provider; 

a user device, in communication with the transaction 
provider, which provides to the transaction provider a 
selection by a user of the user device of a financial 
transaction offered by the transaction provider and the 
user device in response to receipt of an electronic 
receipt provides an acceptance of the financial trans- 
action recorded in the received electronic receipt to the 
transaction provider; 

an intermediate service provider, coupled to the transac- 
tion provider, which processes information relating to 
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the accepted financial transaction transmitted by the 
transaction provider to the intermediate service pro- 
vider to produce processed information pertaining to 
the accepted financial transaction; and 
a user information system, coupled to the intermediate 
service provider, which stores at least electronic 
receipts which are received from the intermediate ser- 
vice provider which are verified by the user information 
system to have been accepted by the user of the user 
device. 

19. A system in accordance with claim 18 wherein: 

the intermediate service provider is a financial institution 
which processes the information relating to the 
accepted financial transaction against an account which 
the user has with the intermediate service provider. 

20. A system in accordance with claim 19 wherein: 

the user device adds to the electronic receipt additional 
information which is used by the user information 
system in processing at least the electronic receipts 
stored by the user information system. 

21. A system in accordance with claim 20 wherein: 

the information provided by the user device to permit the 
transaction provider to verify that the electronic receipt 
is correct comprises an electronic signature. 

22. A system in accordance with claim 21 wherein: 

the user information system also verifies at least any 
received electronic receipts with the electronic signa- 
ture. 

23. A system in accordance with claim 19 wherein: 

the information provided by the user device to permit the 
transaction provider to verify that the electronic receipt 
is correct comprises an electronic signature. 

24. A system in accordance with claim 23 wherein: 

the user information system also verifies at least any 
received electronic receipts with the electronic signa- 
ture. 

25. A system in accordance with claim 19 wherein: 

the user device encrypts an identity of the user from at 
least the transaction provider. 

26. A system in accordance with claim 25 wherein: 

the user device also encrypts contents of the electronic 
receipt from being accessed by the intermediate service 
provider. 

27. A system in accordance with claim 19 wherein: 

the financial institution validates the information relating 
to the selected financial transaction is correct as asso- 
ciated with the account of the user. 

28. A system in accordance with claim 27 wherein: 

the financial institution provides information to the user 
information system that the financial transaction has 
occurred between the user and transaction provider. 

29. A system in accordance with claim 18 wherein: 

the user device adds to the electronic receipt additional 
information which is used by the user information 
system in processing at least the electronic receipts 
stored by the user information system. 

30. A system in accordance with claim 29 wherein: 

the information provided by the user device to permit the 
transaction provider to verify that the electronic receipt 
is correct comprises an electronic signature. 

31. A system in accordance with claim 30 wherein: 

the user information system also verifies at least any 
received electronic receipts with the electronic signa- 
ture. 
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32. A system in accordance with claim 29 wherein: 

the user device encrypts an identity of the user from at 
least the transaction provider. 

33. A system in accordance with claim 32 wherein: 

the user device also encrypts contents of the electronic 
receipt from being accessed by the intermediate service 
provider. 

34. A system in accordance with claim 18 wherein: 

the information provided by the user device to permit the 
transaction provider to verify that the electronic receipt 
is correct comprises an electronic signature. 

35. A system in accordance with claim 34 wherein: 

the user information system also verifies at least any 
received electronic receipts with the electronic signa- 
ture. 

36. A system in accordance with claim 35 wherein: 

the user device encrypts an identity of the user from at 
least the transaction provider. 

37. A system in accordance with claim 36 wherein: 

the user device also encrypts contents of the electronic 
receipt from being accessed by the intermediate service 
provider. 

38. A system in accordance with claim 34 wherein: 

the user device encrypts contents of the electronic receipt 
from at least the transaction provider. 

39. A system in accordance with claim 38 wherein: 

the user device also encrypts contents of the electronic 
receipt from being accessed by intermediate service 
provider. 

40. A system in accordance with claim 18 wherein: 

the user device encrypts an identity of the user from at 
least the transaction provider. 

41. A system in accordance with claim 40 wherein: 

the user device also encrypts contents of the electronic 
receipt from being accessed by the intermediate service 
provider. 

42. A system in accordance with claim 18 wherein: 

the user information system comprises a processor and a 
memory with the memory storing at least electronic 
receipts only after the verification of acceptance of the 
electronic receipts by the user; and 

the processor provides at least one of accounting service 
and financial management service to the user. 

43. A system in accordance with claim 18 wherein: 

the user information system stores in the memory trans- 
action information of the user, is operated by a com- 
pany physically separated from the user and is con- 
nected to the user device by a wireless link. 

44. A process for collecting transaction data comprising: 
providing from a transaction provider to a user device at 

least an electronic receipt of a financial transaction 
obtained by the user from the transaction provider; 
providing a verification from the user device to the 
transaction provider in the electronic receipt that the 
financial transaction is accepted by a user of the user 
device; 

transmitting from either the transaction provider or the 
user device to a user information system at least the 
electronic receipt; and 

storing at least the electronic receipt with the user infor- 
mation system when at least the electronic receipt is 
verified by the user information system to have been 
accepted by the user of the user device. 

45. A process in accordance with claim 44 wherein: 

the user device adds to the electronic receipt additional 
information which is used by the user information 
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system in processing at least the electronic receipt 
stored by the user information system. 

46. A process in accordance with claim 44 wherein: 

the information provided by the user device to the trans- 
action provider to permit the transaction provider to S 
verify that the electronic receipt is accepted by the user 
of the user device comprises an electronic signature. 

47. A process in accordance with claim 46 wherein: 

the user information system also verifies at least any 
received electronic receipts with the electronic signa- 10 
ture. 

48. A process in accordance with claim 44 wherein: 

the transaction provider also provides to the user device 
electronic data identifying financial transactions which ^ 
are offered by the transaction provider. 

49. A process in accordance with claim 44 wherein: 

the user information system comprises a processor and a 
memory with the memory storing at least electronic 
receipts only after the verification of acceptance of the 2Q 
electronic receipts by the user; and 

the processor provides at least one of accounting service 
and financial management service to the user. 

50. A process for collecting transaction data comprising: 
providing form a transaction provider to a user device at 25 

least an electronic receipt of a financial transaction 
obtained by the user from the transaction provider; 
providing a verification from the user device to the 
transaction provider in the electronic receipt that the 
financial transaction is accepted by a user of the user 30 
device; 

transmitting information relating to the accepted financial 
transaction from the transaction provider to an inter- 
mediate service provider; 

processing the information relating to the accepted finan- 35 
cial transaction with the intermediate service provider 
to produce processed information pertaining to the 
accepted financial transaction; and 

receiving at least the electronic receipt with a user infor- ^ 
mation system from the intermediate service provider 
and storing at least the electronic receipt when at least 
the electronic receipt is verified by the user information 
system to have been accepted by the user of the user 
device. 45 

51. A process in accordance with claim 50 wherein: 

the intermediate service provider is a financial institution 
which processes the information relating to the selected 
financial transaction against an account which the user 
has with the intermediate service provider. 5Q 

52. A process in accordance with claim 50 wherein: 

the user device adds to the electronic receipt additional 
information which is used by the user information 
system in processing at least the electronic receipt 
stored by the user information system. 5S 

53. A process in accordance with claim 50 wherein: 

the information provided by the user device to the trans- 
action provider to permit the transaction provider to 
verify that the electronic receipt is accepted by the user 
of the user device comprises an electronic signature. 60 

54. A process in accordance with claim 53 wherein: 

the user information system also verifies at least any 
received electronic receipts with the electronic signa- 
ture. 

55. A process in accordance with claim 50 wherein: $5 
the user device encrypts an identity of the user from at 

least the transaction provider. 
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56. A process in accordance with claim 55 wherein: 

the user device also encrypts the contents of the electronic 
receipt from being accessed by the intermediate service 
provider. 

57. A process in accordance with claim 51 wherein: 

the financial institution validates the information relating 
to the accepted financial transaction is correct as asso- 
ciated with the account of the user. 

58. A process in accordance with claim 57 wherein: 

the financial institution provides information to the user 
information system that the financial transaction has 
occurred between the user and transaction provider. 

59. A process in accordance with claim 50 wherein: 

the intermediate service provider provides the transaction 
provider with an analysis of financial transactions 
accepted by the user of the user device. 

60. A process in accordance with claim 59 wherein: 
the analysis is a statistical analysis. 

61. A process in accordance with claim 50 wherein: 

the transaction provider provides an analysis of sales of 
particular types of financial transactions to manufac- 
turers of products which are involved with the sale. 

62. A process in accordance with claim 61 wherein: 

the analysis involves at least one of location and time that 
the sales were made. 

63. A process in accordance with claim 50 wherein: 

the transaction provider creates profiles of a user of the 
user device based on types of purchases which are 
made. 

64. A process in accordance with claim 50 wherein: 

the transaction provider provides a tabulation of pur- 
chases made by users of the user device. 

65. A process in accordance with claim 64 wherein: 

the tabulation is provided by the transaction provider to a 
manufacturer of products purchased with each financial 
transaction. 

66. A process in accordance with claim 50 wherein: 

the intermediate service provider provides the history of 
a user financial transaction to another for a benefit of 
the user. 

67. A process in accordance with claim 50 wherein: 

the intermediate service provider provides a user of the 
user device with an analysis of the user's history of 
financial transactions. 

68. A process in accordance with claim 67 wherein: 

the analysis identifies types of financial transactions 
which the user has accepted. 

69. A process in accordance with claim 68 wherein: 

the analysis groups products which are involved in finan- 
cial transactions according to categories. 

70. A process in accordance with claim 68 wherein: 

the analysis compares the user's history of financial 
transactions with a history of financial transactions of 
others. 

71. A process in accordance with claim 50 wherein: 

the user device is used by members of an organization and 
information of multiple users is combined in the user 
information system. 

72. A process in accordance with claim 50 wherein: 

the user information system comprises a processor and a 
memory with the memory storing at least electronic 
receipts only after the verification of acceptance of the 
electronic receipts by the user; and 

the processor provides at least one of accounting service 
and financial management service to the user. 
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73. A process in accordance with claim 72 wherein: 
the user information system stores in the memory trans- 
action information of the user, is operated by a com- 
pany physically separated from the user and is con- 
nected to the user device by a wireless link. 

74. A process in accordance with claim 50 wherein: 
the user information system comprises a processor and a 

memory with the memory storing at least electronic 
receipts only after the verification of acceptance of the 
electronic receipts by the user; and 
the processor provides at least one of accounting service 
and financial management service to the user. 

75. A process in accordance with claim 74 wherein: 
the user information system stores in the memory trans- 
action information of the user, is operated by a com- 
pany physically separated from the user and is con- 
nected to the user device by a wireless link. 

76. A system for collecting transaction data comprising: 
a plurality of transaction providers, each transaction pro- 
vider providing at least an electronic receipt of financial 
transactions obtained therefrom; 

a plurality of user devices, in communication with the 
plurality of transaction providers, which provide to at 
least one transaction provider a selection by a user of 25 
each user device of an offered financial transaction and 
in response to receipt of an electronic receipt an accep- 
tance of the transaction recorded in the received elec- 
tronic receipt; 

at least one intermediate service provider, coupled to each 
transaction provider, which processes information 
relating to the accepted financial transaction transmit- 
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ted by each transaction provider to the at least one 
intermediate service provider to produce processed 
information pertaining to the selected financial trans- 
action; and 

at least one user information system, coupled to at least 
one intermediate service provider, each user informa- 
tion system storing at least electronic receipts which are 
received from each intermediate service provider 
which are verified by the at least one user information 
system to have been accepted by the user of each user 
device. 

77. A system in accordance with claim 76 wherein: 

the intermediate service provider provides to at least one 
user of the user devices information on price differ- 
ences at different locations at which the plurality of 
transaction providers are located. 

78. A system in accordance with claim 76 wherein: 

the user information system comprises a processor and a 
memory with the memory storing at least electronic 
receipts only after the verification of acceptance of the 
electronic receipts by the user; and 

the processor provides at least one of accounting service 
and financial management service to the user. 

79. A system in accordance with claim 78 wherein: 

the user information system stores in the memory trans- 
action information of the user, is operated by a com- 
pany physically separated from the user and is con- 
nected to the user device by a wireless link. 
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ABSTRACT 



The present invention provides apparatus, systems and 
methods by which information concerning the shelf-life 
limitations of a particular product item is made available to 
the purchaser electronically; that the electronically recorded 
shelf-life limitation information is provided to, or made 
accessible by, the purchaser; that the electronically recorded 
shelf -life limitation information is communicated to a com- 
puter equipped with a microprocessor, or to a computer 
system network, accessible by the purchaser, programmed to 
receive the shelf-life limitation data for each product for that 
purchaser; that the computer or purchaser-accessible com- 
puter system network, is further programmed to provide the 
purchaser with on-screen and/or printed reports of various 
formats that list the items purchased and the corresponding 
shelf -life limitation information; and that the computer or 
purchaser- accessible computer system network provides 
interactivity with the purchaser to allow the purchaser to 
identify further information to the computer/network, such 
as identifying location information of each particular prod- 
uct item, and the inventory status of each particular product 
item, e.g., whether the product has been opened or has been 
discarded. 

10 Claims, 6 Drawing Sheets 
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Today's Date: 01/02/99 



Item Description 


Quantity 


Purchase 
Date 


Best by 


Use within 


Eggs 


12 


12/26/98 


01/05/98 




Strawberry Yogurt 


2 


12/26/98 


01/05/98 


5 days 


Grapefruit 


6 


12/30/98 


01/12/98 




Lettuce 


1 


12/30/98 


01/05/99 




Fuji Apples 


6 


01/01/99 


01/15/99 




One gallon 2% low fat milk 


2 


0.1/01/99 


01/07/99 




Country beef sausage 


1 


01/01/99 


06/30/99 


7 days 


Low fat cream cheese 


2 


01/01/99 


09/30/98 


10 days 


Near Expired Items 


Spinach 


2 


12/30/98 


01/03/99 




Mushrooms 


1 


12/20/98 


01/04/99 




Expired Items 


Turkey Ham 


1 


11/25/98 12/25/98 





FIG. 6 
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SYSTEM AND METHOD FOR MANAGING with respect to all classes of perishable goods and for simply 

EXPIRATION-DATED PRODUCTS efficiently transferring this information to a consumer so 

UTILIZING AN ELECTRONIC RECEIPT "bat the consumer may maintain a perishable inventory 

control system with a minimum of effort, preferably without 

FIELD OF THE INVENTION 5 requiring any human intervention. The system and method 

~, , . „ . . should reflect not only an item's expiration date, but also the 

The present invention relates generally to inventory con- , . , ' . . „ r .. , ' . 

4 , f , « « * & . freshness penod remaining^ after the package is open, as 

trol systems and methods and more particularly to apparato, well as ^ ^ ^ w 6 hen m ap ^ roach ^ g its 

systems and methods for managing expiration-dated prod- expiration date 

ucts. 

10 SUMMARY OF THE INVENTION 

BACKGROUND OF THE INVENTION ^ and Qmer objects ^ accomplisned in accordance 

Many products and materials have a limited "shelf-life." the present invention by providing the purchaser with 
That is, many products, ranging from pharmaceuticals to electronic inventory control systems and methods for man- 
food products to batteries, are "fresh" for only a certain a ^ n g limited-shelf-life products. 

amount of time. In the case of pharmaceuticals, a particular 15 Mote specifically, the present invention provides 
compound may begin to lose its efficacy a certain amount of apparatus, systems and methods by which information con- 
time after the compound is manufactured. In the case of cerning the shelf-life limitations of a particular product item 
unopened packaged food products, even the best packaging 15 made available t0 tDe purchaser electronically; that the 
may allow deterioration of the freshness and/or quality of electronically recorded shelf-life limitation information is 

many food products a certain amount of time after the 20 V ov t l6td i0 > or mad f "™ b 1 le , b * th f P urcha f r > * at the 

... r , 1 , , ~ , t u'-ei electronically recorded shelf-life limitation information is 

product is prepared and packaged. Even photographic film • . j * * j 

1 u . . 1 r K . r communicated to a computer equipped with a 

can only be trusted to preserve those precious moment for microprocessor) or t0 a compuU f r system network, accessible 

a certain amount of time after the film is manufactured and by thc purchascr> programmed to receive the shelf-life 

packaged. Once opened, many packaged products, such as limitation data for each product for that purchaser; that the 

food, deteriorate in freshness and/or quality within an abbre- computer or purchaser-accessible computer system network, 

viated period of time. j s further programmed to provide the purchaser with 

Many products are labeled with an expiration date in a on-screen and/or printed reports of various formats that list 
form readable by the purchaser. Some products are labeled the items purchased and the corresponding shelf-life limi- 
with a "freshness period" that applies to the product once the tation information; and that the computer or purchaser- 
packaging is opened (e.g., use within 48 hours of opening). 30 accessible computer system network provides interactivity 

Typically, the purchaser of such limited shelf-life prod- the Purchaser to allow the purchaser to identify further 

ucts must manually control the inventory of such products. Information to the computer/network, such as identifying 

Manual control is especially typical of residential and per- locaUon mformation of each particular product item, and the 

, j , i_ *• j • *• j- ■ inventory status of each particular product item, e.g., 

sonal use products such as food, prescript™ median*, 3S whether ^ product has been opened or has been discarded, 

photographic film and the like. r r 

Typically, the approach used to expiration-date an item BRIEF DESCRIPTION OF THE DRAWINGS 

would be to calculate the expiration date based on the date These and other features, aspects and advantages of the 

on which the product is being manufactured; stamp the label present invention will be more fully understood when con- 

of the product with the appropriate expiration date; apply the 40 sidered with respect to the following detailed description, 

label to all product items of the specified type that are appended claims and accompanying drawings wherein: 

manufactured on that day. Since many of the containers used FIG. 1 is a simplified, semi-schematic diagram of an 

to store expiration dated products are manufactured well in expiration date management system in accordance with the 

advance of being filled with a perishable item, it is not present invention, utilizing bar code information; 

presently feasible to expect an item's bar code to express 45 FIG. 2 is a simplified, semi-schematic diagram of an 

expiration date information. Consequently, the expiration expiration date management system according to the present 

date information applied to each item is printed or stamped invention utilizing RFID labeling; 

on the item's packaging only when the products are ready to FIG. 3 is a simplified, semi -schematic block diagram of 

ship. For example, milk and yogurt are packaged in con- an exemplary expiration date database including item 

tainers pre-printed with their appropriate UPC barcode. The 50 description information, an item identification code (UPC 

expiration date information (i.e., good until xx/xx/xx) is code) and expiration date information; 

stamped onto the label after the container is filled. FIG. 4 is a simplified, semi-schematic layout diagram 

Because expiration date information is meant to be visu- detailing an exemplary organization of an electronic receipt; 

ally apparent to an ultimate consumer, such information is FIG. 5 is a simplified, semi-schematic block diagram of 

not expressed in electronic form (i.e., in bar code or RFID 55 the system configuration of an exemplary home terminal; 

form). There is no efficient method by which expiration F IG. 6 is a simplified, semi-schematic layout diagram 

periods can be electronically acquired from an item's pack- detailing the organization of an exemplary expiration date 

aging and stored for processing and expiration date man- listing' and 

agement by an ultimate consumer. Consumers must mami- nG ; 7 fe a simplifiedj semi-schematic diagram of a touch 

ally record freshness periods and engage in complex and 60 { smpn dis Uy of a home terminal, detailing the 

time consuming inventory control activities in order to organizatioD of a purchaser's exemplary expiration date 

manage their food inventory. The problem becomes even listing, 
more complex once it is realized that large classes of 

perishable goods, i.e., fresh fruits and vegetables, are not DETAILED DESCRIPTION OF THE 

identified with any form of expiration date information. 65 INVENTION 

Thus, there is a need for a system and method for In accordance with the present invention, expiration dat- 

acquiring expiration date and/or "freshness'' information ing information pertaining to large classes of perishable 



12/12/2003, EAST Version: 1.4.1 



US 6,327,576 Bl 

3 4 

goods, such as grocery items, is acquired for each of the transaction of the POS terminal 10, or alternatively, the 

items stocked by a particular store and maintained in such a electronic receipt 18 might be electronically transferred to a 

manner as to make this information available to a consumer web server 20 belonging to the retail facility, where it is 

in the form of an electronic receipt. Once the information on maintained in an electronic file storage area 22 for eventual 

an electronic receipt has been transferred to the consumer, 5 retrieval by the consumer. 

this information is used to generate and maintain a residen- A direct transfer of the electronic receipt 18 to a consumer 
tial inventory control system on a home terminal, for might be accomplished by issuing the consumer with a 
example. Thus, shelf life limitations of particular perishable purpose-designed IC card which would necessarily include 
items are provided to a consumer in a form transported to sufficient memory storage space into which an electronic 
and processed by home electronic equipment. Q receipt might be written. Various forms of IC cards are 
There are several different types of shelf life limitation contemplated for use with the present invention. Examples 
information that are associated with certain individual per- of such IC cards include a common rigid plastic card that 
ishable products. Particularly, such information pertains to incorporates a high -density magnetic stripe, suitable for 
the shelf life of the item, i.e., the expiration date for the reading and writing electronic information, a wireless 
unopened product, and the freshness period for which the 15 RF-type card which includes a semiconductor memory, or a 
product remains viable once it has been opened. In accor- contact-type IC card. All of these forms of IC cards are well 
dance with the present invention, shelf life limitations understood by those having skill in the art and the appro- 
expiration date information) for any particular product item priate types of equipment required to read from and write to 
is acquired and recorded in such a way that it is made such IC cards are readily available and, indeed, in common 
electronically available to the purchaser of the item, such 20 use in various types of retail facilities. Writing an electronic 
that the expiration date information is directly associated receipt to a customer's IC card offers the customer a simple 
with a particular product item. and efficient method of receiving an electronic receipt from 
FIG. 1 depicts a simplified, semi-schematic diagram of an a grocery store, for example, and for transporting the elec- 
exemplary expiration date management system in accor- Ironic receipt to a remote location, such as the home, for read 
dance with the present invention, in which expiration date 25 out, evaluation and further processing, 
information is acquired, transferred and processed for any Hosting the electronic receipt in a file or memory storage 
particular perishable item, in connection with a correspond- area 22 of a retail facility's web server 20 allows the 
ing bar code item identifier. As depicted in FIG. 1, a customer the freedom of being able to shop in multiple 
consumer selects items to be purchased, in conventional stores without the necessity of carrying multiple types of IC 
fashion, and loads the items into a utility shopping basket. 30 card, one card for each different store. As electronic receipts 
Once the consumer completes the shopping trip, the con- are loaded into the file or memory storage area 22 of each 
sumer takes the shopping basket to a checkout station where store's web server 20, the electronic receipts are available 
items are identified at a point-of-sale terminal 10 by scan- for a customer to access and download, once the customer 
ning the selected items with a bar code scanner 12. In reaches home and accesses each store's server 20 through 
conventional fashion, the bar code scanner 12 picks up an 35 the customer's Internet connection 20. By signing on to the 
item's UPC (Universal Product Code) or SKU (stock keep- Internet, and visiting each store's web site in sequence, the 
ing unit) code from a bar code printed on each item's customer is able to download each electronic receipt main- 
product label when the label is manufactured, or printed and tained by each of the stores that customer has visited during 
attached locally in the store. the latest shopping trip. 

Suitable bar code information is electronically processed 40 In the home environment, electronic receipt retrieval and 
by the point-of-sale terminal 10 in order to identify the item processing for expiration date management is preferably 
description (item name) and item price. In addition, and in performed by a purpose built electronic home terminal unit 
accordance with the practice of the present invention, the bar 24 which is located in proximity to a refrigerator, if the items 
code information scanned from each particular item is being expiration date managed are grocery items, for 
transmitted to a store platform computer 14 which might be 45 example. Although located in proximity to a refrigerator 26 
configured as a network server, or some other form of or even mounted on the refrigerator unit or in a door thereof, 
platform data processing unit. Once an item has been the home terminal 24 includes appropriate communication 
identified to the store server 14, the server system consults interface hardware and software to enable it to receive 
a database 16 which contains all of the requisite information electronic receipt information, either from a consumer, by 
pertaining to any item of merchandise sold by the store, 50 reading the information contained on the consumer's IC 
including expiration date information, associated to indi- card, or by contacting a store's web server 20 and accessing 
vidual merchandise items through that item's PLU or SKU the file or memory storage area 22 for the appropriate 
code read by the bar code scanner 12. electronic receipt. Such appropriate communication inter- 
In a manner to be described in greater detail below, the face hardware and software might include a modem config- 
server system fetches the requisite information relating to 55 ured for Internet communication through a telephone sub- 
each item scanned for purchase, and redirects that informa- scriber line interface, an ISDN interface, cable modem and 
lion to the POS terminal 10 where it is appended to an cable connection, an IC card reader/writer unit, their appro- 
electronic transaction log file, termed herein an electronic priate controlling application software, and the like, 
receipt 18. It should be noted that the electronic receipt 18 In addition, the home terminal 24 also includes some 
is generated in addition to a conventional paper receipt of the 60 means of scanning, or otherwise identifying, items that have 
form normally provided to a customer at time of check out. been recently purchased and are to be stored in the refrig- 
The electronic receipt 18 might be the primary and only erator unit 26 with which the home terminal 24 is associated, 
receipt generated with regard to that particular transaction, If item identification is made at the retail store with a bar 
i.e., the paper receipt might be provided optionally or not at code, the home terminal 24 will suitably include a bar code 
all, at the option of a retail facility. Since the electronic 65 scanner 28 with which the bar codes of purchased items may 
receipt 18 is in electronic file form, the receipt might be be scanned and entered into the terminal's memory for 
given to the customer directly as the customer completes his further processing. As will be described in greater detail 
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below, the identification means need not be a bar code 
scanner. Various retail facilities often identify their goods 
with an RFID tag either alone, or in combination with a bar 
code. If item information is obtained from reading an RFID 
tag by the store, the home terminal 24 will likewise be 
provided with an RFID receiver unit so that an accurate and 
timely inventory might be taken and maintained of items 
identified by RFID tags. 

Such a system, in accordance with practice of the present 
invention, which utilizes RFID tags for merchandise 
identification, is illustrated in the simplified, semi-schematic 
system diagram of FIG. 2. Since the system, in accordance 
with the invention, depicted in FIG. 2 is generally similar to 
the system illustrated in FIG. 1, and contains a number of 
common elements, those common elements will be identi- 
fied with the same numeral as the corresponding element of 
FIG. 1. Thus, items to be purchased will be taken to a POS 
terminal 10 comprising a checkout station. The POS termi- 
nal 10 need not be a conventional checkout station such as 
one operated by a store clerk, but might also be a self 
operated checkout terminal, a kiosk- type checkout terminal, 
a portable customer operated self-scanning terminal, and the 
like. No matter what form taken by the POS terminal 10, the 
terminal system necessarily includes an RFID reader unit 30 
which is configured to interrogate RFID labels 31 disposed 
on individual items of merchandise and retrieve the item 
information contained in each RFID label. An RFID capable 
terminal is able to read all of the RFID labels of all 
purchased items in a shopping cart or shopping basket in a 
single operation, without the need for human intervention. 
RFID labels conventionally contain at least some form of 
identification code (a PLU code, UPC code or SKU code) 
specific to the particular item to which the RFID label is 
attached. The checkout station terminal 10 identifies all the 
purchased items by the corresponding item code (PLU, SKU 
or UPC), and accesses an item information database (PLU 
table, for example) 16 hosted by a store server 14, in order 
to obtain item information such as the item name, item price, 
associated discounts, and the like, for each purchased item. 

In addition, the checkout terminal 10 is able to retrieve 
expiration date information and freshness period informa- 
tion for each tagged item, by accessing the appropriate item 
database files or PLU table fields of the information database 
16 for each item. Once all of the requisite information is 
obtained for each item identified by an RFID tag, the 
checkout terminal 10 generates an electronic receipt 18, the 
form of which will be described in greater detail below. 

As was the case with the exemplary embodiment of FIG. 
1, the electronic receipt 18 is either provided directly to the 
customer, by writing the electronic receipt information into 
a memory storage area of an IC card or alternatively, the 
electronic receipt is transmitted to the stored web server 20 
where it is stored in a local file or memory storage area 22 
for eventual retrieval. It should be noted, that in both the 
exemplary embodiments of FIGS. 1 and 2, that the elec- 
tronic receipt need not necessarily be generated by the POS 
checkout terminal 10, before transmission to the store's web 
server 20. Indeed, all of the requisite information acquired 
with regard to each individual item to be purchased might be 
processed by the facility's store server 14 in order to 
generate an electronic receipt. In addition, if the system were 
configured to make electronic receipts available to consum- 
ers only through a web server-type arrangement, it will be 
understood that the web server is equally capable of pro- 
cessing each item's associated information in order to gen- 
erate an electronic receipt. Thus, the electronic receipt is 
able to be generated by any of the electronic data processing 
equipments contemplated by the system of the present 
invention. 
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Returning to FIG. 2, once generated, the electronic receipt 
18 is made available to, and processed by, a home terminal 
unit 24 disposed in proximity to the place where perishable, 
expiration dated goods are to be stored, such as a home 
refrigerator 26. As was the case with the illustrated embodi- 
ment of FIG. 1, the home terminal 24 is configured to 
include communication interface hardware and software 
which will allow the home terminal to access an electronic 
receipt storage means and retrieve the electronic receipt 18. 
If the electronic receipt is provided directly to a customer by 
means of an IC card, the home terminal 24 will necessarily 
include an IC card reader/writer unit, configured to interface 
with a customer's IC card. The home terminal is additionally 
configured to include an RFID reader 29 to enable the 
terminal to read RFID tagged goods, as will be described 
further below. The RFID reader 29 is suitably disposed such 
that it is able to interrogate RFID labeled goods inside the 
refrigerator 26 and automatically identify whether items 
have been added or removed from the refrigerator contents. 
Likewise, the home terminal 24 is configured with commu- 
nication interface hardware and software such as a telephone 
line modem, cable modem or any other communication 
interface which allows communication between the home 
terminal 24 and the web server 20 hosting the electronic 
receipt. 

Pertinent to the configuration of the home terminal 24, is 
the realization that its function may be performed by a 
number of different systems. For example, the functions of 
the home terminal are easily performed by a conventional 
personal computer (PC) which might even be configured as 
a lap top. In addition, the home terminal might suitably be 
implemented as a reduced function PC, such as a web 
terminal (a purpose-built processor containing Internet 
access hardware and software and including a web browser). 
The home terminal function might also be accomplished by 
an Internet TV, a web TV or other, similar devices having 
communication interface circuitry, Internet access and some 
degree of processing power. The home terminal, when used 
for expiration date management of grocery items, could be 
configured so as to be easily mounted on the door of a 
refrigerator. The terminal includes at least a display and 
some means for inputting data, such as a touch sensitive 
screen, a keyboard, a keypad and/or speech recognition 
processing. Depending on the system configuration, the 
terminal optionally includes an RFID reader interface, bar 
code scanner interface and/or a Smart Card reader/writer 
interface. In the case where the system is configured to 
operate in conjunction with products that are identified by 
RFID tags, the RFID reader unit 29 is preferably installed 
inside the refrigerator in order to be in sufficient proximity 
to the items to identify RFID labeled items stored therein. 

As was described above, in connection with the exem- 
plary embodiments of FIGS. 1 and 2, expiration date infor- 
mation and freshness period information for any particular 
perishable item stocked by a store can be associated with 
that item in a number of ways. As a particular item is 
manufactured or packaged, that item's expiration date and/ 
or freshness period information is associated to that item by 
the manufacturer. Typically, this is done by stamping or 
otherwise affixing an expiration date onto the product pack- 
age and/or including a freshness period warning among label 
contents, i.e., use within three days after opening. 

In one embodiment of the invention, as a store, such as a 
grocery store, receives merchandise from a wholesaler or 
distributer, the expiration date and freshness period infor- 
mation associated with each item of merchandise received in 
a shipment is entered into the store's merchandise inventory 
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database system along with each item's UPC or SKU code As an item is scanned by a bar code scanner or interro- 
information. When such information is entered into a store's gated by an RFID reader, the bar code or RFID information 
database, it is often compiled in what is termed a PLU (Price is electronically read and interpreted in order to retrieve that 
Look Up or Product Look Up) table. PLU tables are typi- it em ' s expiration date and freshness period information, 
cally organized by an individual item's UPC or SKUnumber s It should bc understood that the particular illustrated 
and include fields associated with an item s code that embodiments of the invention d icled and described ^ 
identify the name of the item, the item price, and the like. A A ~ , ~ r . . . , j4 . 
store's inventory management system might be imple- ™ nncctlon ^th FIGS. 1, 2 and 3 are not intended to be 
mented as an expanded form of PLU table with a number of hmitm S « to how . ^/ration date and freshness period 
items in inventory field appended to the typical item iden- 1fl information is acquired or stored. It should be understood 
tification fields. As new items are received in inventory, each 30 that an ltem information database may be implemented as a 
item's bar code or RFID label is scanned or read and the PLU table > a subset of a PLU table > as a relational database, 
inventory field associated with that particular code is incre- and tne like - Farther, the database need not be hosted on a 
mented. According to the invention, expiration date and platform server, but it might be stored locally at each 
freshness period information are also entered into the sys- checkout station or POS terminal. The database need not 
tern's database as new items of merchandise are added to 15 even be locally available, but rather it might be accessible 
system inventory. Since bar code and RFID labels include through an Internet connection from an enterprise-wide 
lot number and time stamp information, it is a relatively platform system or even constructed "on-the-fly" by access- 
simple matter to keep track of expiration date information ing different web sites for each particular manufacturer as 
with respect to different shipments of similar goods that indicated by the item's bar code or RFID label, 
arrive at different times. Ir lone embodiment of the invention, 20 Fimh ^ iration date and fres hness period infor- 
expiration date and freshness period information is con- m ^ oQ ^ nQ{ ncccssaril be idcd as an adjunct t0 

tained in an appropriate field or fields which are appended to n , . , ' r , i il 1 a 

t , • r »■ c ij * * a • m it fui conventionally understood bar codes or RFID labels. An 

the item information fields contained in a PLU table. , , . i . , , ■ r 

K f , . ,. t c iL 4 . . . t additional method to make expiration date information 

A further embodiment of the invention contemplates -i i_* • - * - * *i. 

.... ■ j . jru • j * c available in a machine readable form is to print the expira- 

maintaining expiration date and freshness period intorma- 25.- Ja j^u • j ■ r iL 

tion in an "expiration date database". Such a database is ^° d . atc md 5 reshneS ? % U f f 0T ™ il0n on * c ?™ d *f 

similar to a PLU table, but is constructed of a truncated set label in a machme-readable fon , such as is used to identify 

of information fields. As depicted in FIG. 3, an expiration codes °n "ipUne tickets. The alpha numeric information is 

date database is constructed of a set of entries, with each scanned b ? a re ™S reta ! ler when the ? roduct * entered 

entry identifying a particular perishable item by its corre- 30 mto mvenlory and the information is interpreted by an 

spondingUPCcode(orSKUnumber).Anexpirationdateis W^** software program into recognizable expiration 

associated to each UPC code, as is a freshness period after date «*>r riietf limitation mformation m an electrom- 

the package is open. If the expiration date database is cally storable torm ; 

constructed to include only perishable items, it is axiomatic In accordance with the present invention, expiration date 

that each item will have an associated expiration date. 35 ^ freshness period information is provided to, or made 

However, not all items will have a varying freshness period accessible to, the purchaser along with other pertinent infor- 

depending on whether or not the item has been removed mation about each item purchased, in the form of an 

from the package. For example, fresh fruits and vegetables electronic receipt. Once all of a customer's items have been 

will be understood to have an expiration date, i.e., a period bar code scanned or RFID interrogated, and the purchaser 

after which they become rotten, but do not necessarily have 40 has P aid for the items, an electronic receipt is generated, 

a variable freshness period. In contrast, many items, such as often in conjunction with an optional conventional paper 

canned fruits and vegetables, will have an expiration date receipt. 

extending far into the future, but have a relatively short FIG. 4 depicts the layout organization of an exemplary 

freshness period, i.e., 7 to 10 days, after the can has been electronic receipt, in simplified, semi-schematic form. As 

opened. The expiration date database makes all of this 45 shown in FIG. 4, a typical electronic receipt will include 

information available upon entry of the appropriate corre- certain demographic information such as the customer's 

sponding UPC code. name, a unique identification tag issued by the store in order 

Thus, as a particular item is being purchased by a cus- to identify that customer (a customer ID), the name of the 

tomer and that item's code is either scanned by a bar code store issuing the receipt, and the time and date of the 

scanner or accessed by an RFID reader, that item's expira- 50 shopping excursion. Additionally, an electronic receipt 

tion date and freshness period information is extracted from includes the same types of information associated with 

the database either from that item's PLU table entry or from conventional paper receipts, such as the name of each item 

information entered into an expiration date database. or its description, the quantity of each item purchased and 

As an alternative to database or PLU table entry, an item's me price paid for the item. The electronic receipt also 

expiration date and/or freshness period information may be 55 includes entries for the total price paid, sales tax 

embedded or appended to machine readable item identifi- information, and the like. 

cation means (bar code or RFID tag) affixed to an item's In accordance with the invention, the electronic receipt 

packaging. Expiration date information and/or freshness further includes certain information not normally contained 

period information might be provided as part of an extended in a conventional paper receipt. This information suitably 

bar code or as a second bar code printed on the product 60 comprises each item's UPC code, with each code entry 

packaging as the item is ready to ship. Likewise, expiration associated with its corresponding item, an expiration date 

date information and freshness period information might be entry and a freshness period entry, each associated to its 

appended to the conventional information provided in an corresponding item through that item's UPC code. Thus, as 

RFID tag. Thus, rather than defining a link to the expiration indicated in FIG. 4, the customer purchased two portions of 

date and freshness period information contained in the 65 low fat cream cheese at a price of $5.96. Low fat cream 

database, an item's bar code and/or RFID tag contains all of cheese has a UPC code of 41334444 and an expiration date 

the requisite information associated to that item. of Sep. 30, 1999. The low fat cream cheese item purchased 
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by the customer has a residual freshness period of 10 days 
after the package has been opened, after which the item is no 
longer safe for consumption. Further, as is indicated in FIG. 
4, items such as Fuji apples and low fat milk have an 
expiration date but no residual freshness period. Likewise, 
items such as tissues and shampoo have neither a residual 
freshness period nor an expiration date. All of the informa- 
tion contained in the exemplary electronic receipt of FIG. 4 
is able to be retrieved electronically by whatever form of 



server is able to automatically generate an e-mail to the 
purchaser's home terminal in order to notify the purchaser 
that the electronic receipt is available for access or down- 
load. Pertinent to the communication interface 66 is that the 
interface is coupled to a global communications network, 
such as the Internet, via a communication link such as a 
telephone subscriber line, ISDN line, cable, satellite, or 
other similar form of communication link. However 
accessed, whether through the Smart Card reader 64 or the 



system is preparing the electronic receipt. Typically the item 10 communication interface 66, the electronic receipt informa 



description and item price information are acquired from the 
store's PLU table, as is the UPC information. Expiration 
date and freshness period information is acquired either 
from the store's PLU table, an expiration date database, or 
from an extended bar code or an extended RFID label affixed 
to the product. 

As was described above, the electronic receipt can either 
be recorded on a Smart Card or IC card and presented to the 
purchaser upon checkout or alternatively, the electronic 



tion received by the home terminal is stored in a local 
memory storage area 68 which might be implemented as 
Read Only Memory (ROM), Random Access Memory 
(RAM), a hard disk drive, or the like. 
35 In order to account for changes in a purchaser's perishable 
goods inventory, the home terminal is suitably provided with 
various means to identify products as they are introduced to 
a refrigerator, for example, by the purchaser. In this regard, 
the home terminal includes a bar code scanner 70 coupled to 



receipt can be delivered through a communications network, 20 a Dar code scanner interface 72, in turn connected to and 



controlled by the home terminars control unit 62. The bar 
code scanner 70 functions to identify the introduction of 
goods that are identified by bar codes that have been 
pre -printed on the product label, for example. In addition, in 
cases where certain merchandise items are identified and 
tagged by RFID labels, the home terminal is suitably pro- 
vided with an RFID reader 72, coupled to and controlled by 
the control unit 62 which is able to interrogate and identify 
a product's RFID label through an integral antenna 74. 

Thus, it should be understood that the home terminal has 
generally the same capabilities of recognizing a product, 
particularly with respect to the product's UPC code, as the 
store from which that product was purchased. In the case of 
the store, the product indicia (the bar code or RFID label) 



such as the Internet, typically through a store server, to a 
particular web server. The web server stores the purchasers 
electronic receipt in a database of electronic receipts where 
it may be suitably accessed by either the consumer or by a 
home terminal, such as will be described further below. In an 2 s 
embodiment where the electronic receipt is saved in a 
database of receipts, it will be understood that appropriate 
password protection will be given to the electronic receipt 
information such that only the appropriate purchaser can 
access the information. For example, the customer might 30 
identify themselves with their customer ID, which is 
matched to the customer ID field comprising a receipt. 

In accordance with the present invention, the expiration 
date and/or freshness period information, included in the 

electronic receipt along with the item description and the 35 was translated to a UPC number (in its simplest form) which 
item's UPC code, is communicated to a computer equipped was then used to access a store database in order to acquire 
with a microprocessor, or to a computer system network, additional information about that product. In the case of the 
accessible by the purchaser, and programmed to receive the home terminal, generally the same apparatus (bar code 
information contained in an electronic receipt for each scanner or RFID reader) is used to acquire the same product 
product item purchased by that purchaser. In a residential 40 indicia which, in a manner to be described in greater detail 
embodiment, the computer system might be implemented as below, is used to identify recently purchased perishable 
a home PC, a web terminal, Internet TV, web TV a special- goods and to invoke the terminal's expiration date manage- 
ized purpose-built "kitchen terminal" or the like (all referred ment system. 

to herein with the common term "home terminal"). FIG. 5 is In operation, the home terminal (24 of FIGS. 1 and 2) is 
a simplified, semi-schematic block diagram of an exemplary 45 used to specify items that have been purchased and that will 
system configuration of a home terminal, suitable for prac- be stored in a refrigerator, for example, by the purchaser 
tice of the present invention. As seen in FIG. 5, one (i.e., used to inventory items). Specifying newly purchased 
embodiment of a home terminal includes a display screen 60 items depends on whether the items are identified by a bar 
which might be implemented as a "touch screen" or touch code label or by an RFID label. In the first case, items are 
panel display. The display screen 60 is coupled to and 50 specified to the home terminal by depressing an "IN" key or 
controlled by a central control unit 62 which performs the button, indicating that the terminal is to download an elec- 
primary processing functions of the home terminal and tronic receipt and add the newly purchased items into 
which includes a microprocessor, a signal processor, or terminal memory. In the case of items identified by an RFID 
some other such form of central processing unit. label, the home terminal's RFID reader 72 identifies the 

The purchaser is able to transfer the contents of the 55 addition of newly purchased items by periodically interro- 
electronic receipt to the home terminal in any one of a gating the contents of the refrigerator and, if new items are 
number of ways. The home terminal has the provision for discovered, the terminal downloads the appropriate elec- 
being connected to an optional Smart Card reader/writer 64 tronic receipt. After items have been identified to the termi- 
with which to access the electronic receipt information nal as newly purchased, the control unit, under appropriate 
recorded on a Smart Card or IC card by the store where the 60 software program control, obtains the corresponding elec- 



purchaser bought the product items. Alternatively, a com- 
munication interface 66, such as a modem, cable modem or 
other similar communication interface device, enables a 
home terminal to contact an off-site location, such as a store 
web site, where it is able to access and download an 
electronic receipt. It should be noted that in the case where 
the electronic receipt is stored on a web server, the web 



65 



tronic receipt from the store's web server either by Internet 
mail or direct web site access. In this particular 
circumstance, the customer name, customer ID, store name 
and shopping date and time are used as key associative 
information for electronic receipt retrieval. If the electronic 
receipt is provided to the purchaser by means of a Smart 
Card or IC card, the home terminal control unit would 
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display a "insert Smart Card" message to the consumer and append all newly purchased items to its current stock, the 

subsequently read the contents of the Smart Cart or IC card user is able to manually edit the list by selecting certain 

in order to obtain the electronic receipt information. items which do not have expiration dates, i.e., tissues, and 

Once the electronic receipt is obtained, by either access depressingtheOUTkeyorbutton84onth e terminal- S touch 

means, the items listed in the electronic receipt are added or 5 P«nel «"en. Thus, the home terminal system is able to 

appended to an internally maintained file comprising a listof create ™ d mau ! a,n a ^rent stock hst (exptration date hst) 

: r , /. f 4 i- *\ n j« 4 . comprising an item name or description, a quantity field, a 

stock items (i c, an inventory list). Depenchng on the ^ ^ ficM and ^ ^ tQ ^ ^ ^ 

parucular configuration desired, either all of the items date and/or ^ Qdi freshness ri od. 

included in the electronic receipt are added to the list of ^ hbM ^ RHD afe ^ tQ be automaticaU 

stock items or, alternatively, only items which have expira- 10 ^ ^ ^ hafied iUms can ^ 

tion date information are captured and are added to a list of automatically identified. The terminal periodically interro- 

expiration date stock items. gates tne refrigerator contents, by asserting an RF interro- 

FIG. 6 is a simplified, semi-schematic illustration of an gation signal, to determine if any newly purchased items 

exemplary "expiration date list" such as might be obtained have been added. Each item in the refrigerator provided with 

and constructed from the electronic receipt information 1 an RFID label responds with its label contents, i.e., its UPC 

depicted in FIG. 4. The exemplary expiration date list of code. The control unit compares the current inventory with 

FIG. 6 is constructed to include an item description field for the previous inventory and, if any newly purchased items are 

each item captured from the electronic receipt, an item present, invokes an application program. As described 

quantity field, a purchase date field and particular fields previously, the program retrieves an electronic receipt, either 

denoting expiration date and freshness period information from a store web page or by requesting the customer to insert 

captured from an electronic receipt. a smart card containing electronic receipt information. Once 

Turning now to FIG. 7, which is an exemplary home the electronic receipt is obtained, expiration date informa- 

terminal screen display of the expiration date list of FIG. 6, tion and other related indicia is matched to the newly added 

the operation of the home terminal will now be described in ^ items by the UPC code. 

connection with a particular set of control functions, illus- Since it is sometimes the case that a certain number of 

trated as function buttons in the exemplary embodiment of purchased items are not labeled, either with a bar code or 

FIG. 7, when the display screen is implemented as a touch with an RFID label, it becomes necessary to manually 

screen panel. Briefly, the touch panel is used to specify the inform the home terminal unit that certain items are being 

various control functions as well as providing an alpha 3Q added into perishable item inventory. This is also the case 

numeric character input for manual item data input. When where a particular store does not have the capability of 

configuring the screen as an alpha numeric input, a special creating an electronic receipt. 

function button such as "home" 76 or "help" 78 might be [ n either case, items may be manually identified to the 
selected to invoke a function menu from which a keypad home terminal unit by depressing the IN key or button 80 on 
configuration might be selected for manual data input. 35 the touch panel screen. When IN is depressed, and no 
However, the operation of the home terminal in accord with electronic receipt is available, the corresponding I/O devices 
the present invention will be described in connection with SU ch as the bar code scanner (70 of FIG. 5) or RFID reader 
automatic item data entry for ease of explanation. (72 of FIG. 5) are activated for manual entry. Manual data 
In order for the terminal to develop and maintain a stock entry can be done by scanning an item's bar code, reading 
record of items stored in a refrigerator, it is necessary to 40 the contents of an RFID label or by reconfiguring the screen 
indicate to the terminal that newly purchased items have for alpha-numeric keyboard entry. Thus, the present inven- 
been added to the current stock. Since items identified by bar tion is able to accommodate manual data entry when 
code labels cannot be automatically identified to the necessary, even though it is primarily configured to mini- 
terminal, these items are identified to the home terminal unit mize human intervention. 

as added items, by the user, by depressing the "IN" key 80 45 Once the list is created, a purchaser is able to review the 

on the touch screen panel of the home terminal display contents of the list by depressing a "LIST" key 82. As shown 

screen 60. When the "IN" key 80 is depressed, an applica- in the exemplary screen display of FIG. 7, the inventory list 

tion software program resident in the home terminal under- includes not only a list of expiration dated products, but also 

stands that additional items are to be added to the list a sub-list of "near expired items" as well as an additional 

maintained in memory and issues the appropriate commands so sub-list of "already expired items". The "near expired items" 

to launch a web access routine and request the latest elec- list is a purpose defined subset of the complete expiration 

tronic receipt information from a web server, for example, date list but includes those selected items whose expiration 

using the customer's name, customer ID, store name and date is calculated as being within a pre-defined time period 

shopping date and time, as key index fields for receipt of the current date and time (i.e., today). As depicted in FIG. 

retrieval. 55 7, two packages of spinach have an expiration date of Jan. 

Alternatively, if an electronic receipt is provided by a 3, 1999, which is only one day away from the current date 

smart card, the control unit (62 of FIG. 5) causes the screen of Jan. 2, 1999. Likewise, a package of mushrooms has an 

to display the message "insert smart card". Once the smart expiration date of Jan. 4, 1999, only two days away from the 

card is inserted into the smart card reader (64 of FIG. 5) the current date. 

terminal reads the contents of the card to obtain the elec- 6Q The "already expired items" list includes those items 

tronic receipt information. whose expiration date has already passed. Likewise, the 

Once the electronic receipt information is received (either "already expired items" list might also include those items 

from the web server or from a purchaser's IC card) the home whose expiration date has not yet been exceeded, but which 

terminal system may either append all newly purchased have been opened for a period longer than their stated 

items to the current stock list or, alternatively may only 65 freshness period. 

append those items which contain expiration date inform a- In this regard, the user is able to identify when a particular 

tion to the current list. Where the terminal is configured to perishable item's package has been opened by depressing 
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the OPEN key 83 of the touch screen panel of the home 
terminal. Once the OPEN key has been depressed, the user 
selects which of the items have indeed been opened by 
scrolling through the perishable item list and selecting the 
specific item whose container has just been opened. The user 
might, for example, select the OPEN key 83 and then choose 
low. fat cream cheese as the item which has been opened. 
Since there are two quantities of low fat cream cheese 
indicated in the list, only one will be selected unless the user 
chooses to select the second. For the item selected as being 
open, the system begins a countdown clock which decre- 
ments the freshness period entry by 1 for each passing 
calendar day. Thus, the low fat cream cheese entries for Jan. 
4, 1999 would include 1 entry having a freshness period of 
10 days and a second entry having a freshness period of 8 
days. 

Once an item has been exhausted, or the user desires to 
remove an item from storage either for consumption or 
because it has exceeded its expiration date period, the user 
selects the OUT key 84 which indicates to the home terminal 2 o 
system that an item or items will be deleted from the list. 
After the OUT key 84 has been selected, the user again 
scrolls through the list of items in order to select the item or 



obtained in order to construct the perishable item inventory 
list. Data input can be anywhere from completely manual to 
completely automatic (not requiring any human 
intervention) depending on the type and manner of item 
5 coding (i.e., bar code or RF1D label) and the type and 
manner of system interrogation and data processing. 

Thus, according to the invention, the system has present 
utility when an electronic receipt is used in conjunction with 
a conventional product code such as a bar code or an RFID 
30 label. The product code functions as a key which points to 
product name, description, price and expiration date infor- 
mation in the retail store environment. Likewise, the product 
code is used as a key in defining which items are to be added 
to perishable item inventory in the home environment. In the 
15 home, a home terminal uses the key to select items from an 
electronic receipt for addition to a perishable item inventory 
list. The perishable item inventory list includes the same 
type of product name, description, expiration date and/or 
freshness period information which was matched to a cor- 
responding item in the retail store through the product code 
key. Use of an electronic receipt does not require changing 
current bar code application procedures nor does it require 
printing of additional information on product packaging 
when perishable contents are introduced to a package or 



items which will be deleted. If, for example, the user 

consumes all of one quantity of low fat cream cheese, the 2 5 container. 

perishable item inventory list will only have an entry for 1 [n Mm parlicular i y in lhe case of an RFID label 
quantity of low fat cream cheese remaining. ^ cxpandcd capabi Hties, all information may be easily 
It should be understood that in the case of goods identified mcorporat ed into an RFID label and such information may 
by an RFID label, the user need not concern themselves with be automat i ca u y captured by a home terminal unit upon that 
use of the IN 80 or OUT 84 keys m order to indicate to the 30 product > s introduction into perishable item inventory stor- 
home terminal that items have been added or deleted from age both electronic reC eipts and human intervention 
inventory. Where the system contemplates the use of RFID afe nQ longer required for tne addition or deletion of 
labels, the system is configured to automatically and pen- per jshable items from a perishable item inventory list. While 
odically interrogate the contents of the refrigerator and the ^ve^ou Das been described in connection with par- 
compare the return values with the perahable tem inventory 35 ticular iterated embodiments, those skilled in the art and 
iL i„ -jj-j —j technology to which the invention pertains will have no 



list. In this manner, both newly added items and newly 
deleted items will be immediately identified by comparing 
the results of the present interrogation with the next prior 
one's results. It should also be noted that if the item is 



difficulty devising variations which in no way depart from 
the scope and spirit of the present invention. For example, 
while the illustrated embodiments have been described in 



identified by a bar code, the user is able to identify that 40 conDCC tion with consumer shopping and home usage, it will 
item's deletion by depressing the OUT key 84 and then by 
scanning the item's bar code. This informs the system that 
that item has been deleted and its entry is consequently 
removed from the perishable item inventory list. 



be appreciated that the present invention may be adapted for 
utilization in restaurants, pharmacies, hospitals, and the like. 
Further, it will be understood that although the term "pur- 
chaser" has been used throughout the above -specified 



Notwithstanding the foregoing, it should be understood 45 description, the term "purchaser" includes the individual 



that the operation of the home terminal unit has been 
described in connection with the above-exemplary embodi- 
ment for the case where an item bar code or an item RFID 
label contains only the item identification code (i.e., a UPC 
code or an SKU code). In the case where additional infor- 50 
mation is included as an extended bar code or an additional 
bar code pre-printed on a package label or additional infor- 
mation is included in the contents of an RFID label, there 
may be no need for the home terminal unit to consult an 
electronic receipt in order to generate a perishable item 55 
inventory list with all of the necessary data fields included 
therein. Depending on the type and amount of information 
included in either a bar code or an RFID label, it will be 
understood by those having skill in the art that the home 
terminal unit may need to consult an electronic receipt for a 60 
reduced subset of information contained thereon. For 
example, if the bar code or RFID label contains an expanded 
set of product identification information, the home terminal 
unit may only need to consult an electronic receipt in order 
to obtain expiration date and/or freshness period informa- 65 
tton. The home terminal will thus be understood to be a 
rather flexible device with regard to how information is 



that actually purchases the product items and anyone else 
able to operate the system in the case of home use of the 
invention. Accordingly, the present invention is not limited 
to the specific embodiments described above, but rather is 
defined by the scope and spirit of the appended claims. 
What is claimed is: 

1. A method for managing product items with shelf -life 
limitations comprising the steps of: 

associating shelf-life limitation information to each of one 
or more perishable product items; 

recording said shelf -life limitation information for each of 
said one or more perishable product items in a data- 
base; 

identifying selected ones of perishable product items 
being purchased;' 

recovering said recorded shelf-life limitation information 
from the database for each of the perishable product 
items selected for purchase; 

electronically recording said shelf-life limitation informa- 
tion for each of said one or more product items in an 
electronically readable and storable form; 
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providing the shelf- life limitation information to a pur- 
chasing customer in the electronically readable and 
storable form; and 

using a terminal accessed by the purchasing customer to 
add the shelf-life limitation information to an inventory 5 
list, the inventory list being used by the purchasing 
customer to manage use of the said one or more product 
items. 

2. The method according to claim 1, further comprising 
the step of transferring said electronically recorded shelf-life 10 
limitation information to a memory storage area. 

3. The method according to claim 2, wherein the shelf -life 
limitation information is recorded on an electronic receipt, 
the electronic receipt being transferred to a memory storage 
area of a web server. 15 

4. The method according to claim 2, wherein the shelf -life 
limitation information is recorded on an electronic receipt, 
the electronic receipt being transferred to a memory storage 
area of a smart card. 

5. The method according to claim 2, further comprising 20 
the steps of: 

retrieving the shelf-life limitation information from the 

memory storage area; and 
displaying the electronic shelf-life limitation information 25 

for each of said one or more product items on a home 

terminal display screen. 
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6. The method according to claim 5, wherein the recorded 
shelf-life limitation information is electronically recovered 
from the database by a store check-out terminal. 

7. The method according to claim 6, wherein the store 
check-out terminal electronically recovers the recorded 
shelf-life limitation information for each perishable product 
item by scanning a bar code each item and associating each 
item's bar code with an entry in the database. 

8. The method according to claim 6, wherein the store 
check-out terminal electronically recovers the recorded 
shelf-life limitation information for each perishable product 
item by reading an RFID label affixed to each item and 
associating each item's RFID label information with an 
entry in the database. 

9. The method according to claim 6, wherein the database 
comprises a price-look-up table, shelf-life limitation infor- 
mation for each perishable product item being associated to 
that item according to its corresponding entry in the price - 
look-up table. 

10. The method of claim 1, wherein the shelf-life limita- 
tion information includes a period for which the product 
remains viable once it has been opened. 

***** 
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